(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 795.471865][T10227] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 795.507590][T10227] FAT-fs (loop5): Filesystem has been set read-only 23:00:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:33 executing program 3: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 23:00:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:33 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x3d5342, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 23:00:34 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 796.361287][T10275] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 796.376712][T10275] FAT-fs (loop5): Filesystem has been set read-only 23:00:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 796.661807][T10291] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 796.682780][T10291] FAT-fs (loop5): Filesystem has been set read-only 23:00:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:34 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x3d5342, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 23:00:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 797.072454][T10302] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 797.100813][T10302] FAT-fs (loop3): Filesystem has been set read-only [ 797.158888][T10307] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:00:35 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c8307b5381c320e6c695d81054adb81df7811737a30d85505176fd95d1e7ae6e663d5fe078b0aae62e724d9f6a978c7315af5bc810f81613633db4816fa9a6eb2c4bb4f307ec4b85e66e4fdc363ca211d0dc809d250cb62d8003c68012a1d2fdcefcad539a51e8425f33d69c5048bb3cd8f7f64a71fafeabc7421ba9ee1abad99ef7008c37a8183cde5b14d5460453a68146ce6"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 797.251767][T10307] FAT-fs (loop5): Filesystem has been set read-only 23:00:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 797.600760][T10329] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 797.605500][T10335] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 797.630443][T10335] FAT-fs (loop5): Filesystem has been set read-only [ 797.645283][T10329] FAT-fs (loop3): Filesystem has been set read-only 23:00:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:35 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x3d5342, 0x0) pipe(&(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 797.959095][T10349] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 797.973124][T10349] FAT-fs (loop5): Filesystem has been set read-only 23:00:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:00:36 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 798.270466][T10354] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 798.354239][T10354] FAT-fs (loop3): Filesystem has been set read-only 23:00:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:36 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x3d5342, 0x0) pipe(&(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:37 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:37 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:00:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:37 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x3d5342, 0x0) pipe(&(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:38 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000ff"], 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:00:38 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4040080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff0001049c84c9e1b0a84300000000000000050000000000979e082ab1904db5e85e4cc0ee130aeb1b89fd4d9e3192eaa6a1340827dc4e010a2814430ee843655e2a78a763e5062d04905411adb18088618d62586bb807e3ac3ef74d8c32149f51d53f193b903538d596359f5f263c7fad2da8b7ded4c7", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) pipe(&(0x7f0000000200)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x4}) dup(0xffffffffffffffff) open(&(0x7f0000000540)='./file0\x00', 0x3d5342, 0x0) pipe(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 23:00:38 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 23:00:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:39 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e"], 0x93) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:39 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 802.116096][T10534] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 802.195796][T10534] FAT-fs (loop5): Filesystem has been set read-only [ 802.222232][T10534] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 802.281008][T10534] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 802.366923][T10544] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:00:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 802.421966][T10522] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 802.471823][T10544] FAT-fs (loop2): Filesystem has been set read-only [ 802.538765][T10544] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:40 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:40 executing program 4: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 802.679352][T10530] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:40 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:41 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:41 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13"], 0x4a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c8307b5381c320e6c695d81054adb81df7811737a30d85505176fd95d1e7ae6e663d5fe078b0aae62e724d9f6a978c7315af5bc810f81613633db4816fa9a6eb2c4bb4f307ec4b85e66e4fdc363ca211d0dc809d250cb62d8003c68012a1d2fdcefcad539a51e8425f33d69c5048bb3cd8f7f64a71fafeabc7421ba9ee1abad99ef7008c37a8183cde5b14d5460453a68146ce6"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:42 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:42 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 23:00:43 executing program 3: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:43 executing program 3: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:43 executing program 3: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:43 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:43 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:43 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 23:00:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:00:44 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:44 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:44 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 23:00:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:45 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 807.593823][T10829] FAT-fs (loop3): bogus number of reserved sectors [ 807.601005][T10829] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:45 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 807.844842][T10845] FAT-fs (loop1): bogus number of reserved sectors [ 807.927306][T10850] FAT-fs (loop3): bogus number of reserved sectors [ 807.940219][T10850] FAT-fs (loop3): Can't find a valid FAT filesystem [ 807.945973][T10845] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 808.184195][T10863] FAT-fs (loop3): bogus number of reserved sectors [ 808.244349][T10863] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:00:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 808.527538][T10877] FAT-fs (loop3): bogus number of reserved sectors [ 808.542364][T10877] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 808.765606][T10891] FAT-fs (loop3): bogus number of reserved sectors [ 808.787405][T10891] FAT-fs (loop3): Can't find a valid FAT filesystem [ 808.808668][T10897] FAT-fs (loop1): bogus number of reserved sectors [ 808.841961][T10897] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 809.125294][T10919] FAT-fs (loop3): bogus number of reserved sectors [ 809.172307][T10919] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 809.509161][T10936] FAT-fs (loop3): bogus number of reserved sectors [ 809.523992][T10936] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 809.704009][T10947] FAT-fs (loop1): bogus number of reserved sectors [ 809.712505][T10948] FAT-fs (loop4): bogus number of reserved sectors [ 809.736239][T10953] FAT-fs (loop3): bogus number of reserved sectors [ 809.752165][T10953] FAT-fs (loop3): Can't find a valid FAT filesystem [ 809.774764][T10948] FAT-fs (loop4): Can't find a valid FAT filesystem [ 809.802613][T10947] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:00:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 810.087425][T10976] FAT-fs (loop3): bogus number of reserved sectors [ 810.124527][T10976] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:48 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:48 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 810.493685][T10992] FAT-fs (loop3): bogus number of reserved sectors 23:00:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 810.556164][T10992] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 810.607092][T11004] FAT-fs (loop4): bogus number of reserved sectors [ 810.613847][T11004] FAT-fs (loop4): Can't find a valid FAT filesystem [ 810.775225][T11010] FAT-fs (loop1): bogus number of reserved sectors [ 810.784824][T11010] FAT-fs (loop1): Can't find a valid FAT filesystem [ 810.788295][T11017] FAT-fs (loop3): bogus number of reserved sectors [ 810.835823][T11017] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 811.038716][T11034] FAT-fs (loop3): bogus number of reserved sectors [ 811.052193][T11034] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 811.172300][T11039] FAT-fs (loop3): bogus number of reserved sectors [ 811.184566][T11039] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 811.312879][T11045] FAT-fs (loop3): bogus number of reserved sectors [ 811.346567][T11045] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:49 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:49 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 811.616551][T11023] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 811.662643][T11023] FAT-fs (loop5): Filesystem has been set read-only [ 811.673542][T11058] FAT-fs (loop4): bogus number of reserved sectors [ 811.680263][T11059] FAT-fs (loop3): bogus number of reserved sectors [ 811.687276][T11059] FAT-fs (loop3): Can't find a valid FAT filesystem [ 811.699192][T11058] FAT-fs (loop4): Can't find a valid FAT filesystem 23:00:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 811.710778][T11066] FAT-fs (loop1): bogus number of reserved sectors [ 811.729239][T11066] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 812.038225][T11080] FAT-fs (loop3): bogus number of reserved sectors [ 812.064571][T11080] FAT-fs (loop3): Can't find a valid FAT filesystem [ 812.226439][T11082] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:00:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 812.320334][T11082] FAT-fs (loop5): Filesystem has been set read-only [ 812.381239][T11082] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 812.459779][T11093] FAT-fs (loop3): bogus number of reserved sectors [ 812.478796][T11081] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:00:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 812.544404][T11093] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:50 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 812.716374][T11105] FAT-fs (loop3): bogus number of reserved sectors [ 812.723015][T11105] FAT-fs (loop3): Can't find a valid FAT filesystem [ 812.883568][T11111] FAT-fs (loop4): bogus number of reserved sectors [ 812.891512][T11112] FAT-fs (loop1): bogus number of reserved sectors [ 812.918525][T11112] FAT-fs (loop1): Can't find a valid FAT filesystem [ 812.942292][T11111] FAT-fs (loop4): Can't find a valid FAT filesystem 23:00:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 813.361799][T11136] FAT-fs (loop3): invalid media value (0x00) 23:00:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 813.418680][T11136] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:51 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:51 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c8307b5381c320e6c695d81054adb81df7811737a30d85505176fd95d1e7ae6e663d5fe078b0aae62e724d9f6a978c7315af5bc810f81613633db4816fa9a6eb2c4bb4f307ec4b85e66e4fdc363ca211d0dc809d250cb62d8003c68012a1d2fdcefcad539a51e8425f33d69c5048bb3cd8f7f64a71fafeabc7421ba9ee1abad99ef7008c37a8183cde5b14d5460453a68146ce6"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 23:00:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 813.827097][T11150] FAT-fs (loop4): bogus number of reserved sectors 23:00:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 813.884150][T11156] FAT-fs (loop3): invalid media value (0x00) [ 813.907687][T11156] FAT-fs (loop3): Can't find a valid FAT filesystem [ 813.920662][T11163] FAT-fs (loop1): bogus number of reserved sectors [ 813.965880][T11150] FAT-fs (loop4): Can't find a valid FAT filesystem 23:00:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 814.022794][T11163] FAT-fs (loop1): Can't find a valid FAT filesystem [ 814.219020][T11167] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:00:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 814.457387][T11167] FAT-fs (loop2): Filesystem has been set read-only [ 814.479551][T11167] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 814.511375][T11167] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 814.529009][T11167] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:52 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 814.672901][T11191] FAT-fs (loop3): invalid media value (0x00) [ 814.679463][T11160] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 814.707025][T11191] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 814.899797][T11211] FAT-fs (loop2): invalid media value (0x00) 23:00:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 814.974957][T11204] FAT-fs (loop4): bogus number of reserved sectors [ 814.994740][T11211] FAT-fs (loop2): Can't find a valid FAT filesystem [ 814.995985][T11208] FAT-fs (loop1): bogus number of reserved sectors 23:00:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 815.042070][T11204] FAT-fs (loop4): Can't find a valid FAT filesystem [ 815.133033][T11208] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c8307b5381c320e6c695d81054adb81df7811737a30d85505176fd95d1e7ae6e663d5fe078b0aae62e724d9f6a978c7315af5bc810f81613633db4816fa9a6eb2c4bb4f307ec4b85e66e4fdc363ca211d0dc809d250cb62d8003c68012a1d2fdcefcad539a51e8425f33d69c5048bb3cd8f7f64a71fafeabc7421ba9ee1abad99ef7008c37a8183cde5b14d5460453a68146ce6"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 815.276801][T11228] FAT-fs (loop3): invalid media value (0x00) [ 815.294266][T11228] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 815.640037][T11247] FAT-fs (loop3): invalid media value (0x00) [ 815.650911][T11247] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 23:00:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 815.822769][T11242] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 815.895100][T11242] FAT-fs (loop2): Filesystem has been set read-only [ 815.934627][T11242] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 815.955342][T11264] FAT-fs (loop1): bogus number of reserved sectors [ 815.961924][T11264] FAT-fs (loop1): Can't find a valid FAT filesystem [ 816.033025][T11265] FAT-fs (loop4): bogus number of reserved sectors [ 816.094970][T11273] FAT-fs (loop3): invalid media value (0x00) [ 816.096560][T11265] FAT-fs (loop4): Can't find a valid FAT filesystem [ 816.120415][T11273] FAT-fs (loop3): Can't find a valid FAT filesystem [ 816.177942][T11241] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:54 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 816.473161][T11293] FAT-fs (loop3): invalid media value (0x00) [ 816.558534][T11293] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:54 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) 23:00:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 816.895659][T11309] FAT-fs (loop4): bogus number of reserved sectors [ 816.902572][T11309] FAT-fs (loop4): Can't find a valid FAT filesystem [ 817.112199][T11310] FAT-fs (loop3): invalid media value (0x00) [ 817.118641][T11312] FAT-fs (loop1): bogus number of reserved sectors [ 817.129416][T11312] FAT-fs (loop1): Can't find a valid FAT filesystem [ 817.137963][T11310] FAT-fs (loop3): Can't find a valid FAT filesystem 23:00:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:55 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:55 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000280)="1296260419d4e0c10f774623f1", 0xd, 0x40000, &(0x7f00000002c0)={0x2, 0x4, @remote}, 0x10) 23:00:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 817.843005][T11352] FAT-fs (loop4): bogus number of reserved sectors [ 817.869054][T11360] FAT-fs (loop1): bogus number of reserved sectors [ 817.883604][T11352] FAT-fs (loop4): Can't find a valid FAT filesystem [ 817.924393][T11360] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:56 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) 23:00:56 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r0, r0, 0x0, 0x8080fffffffe) [ 818.934886][T11404] FAT-fs (loop4): bogus number of reserved sectors [ 818.941627][T11404] FAT-fs (loop4): Can't find a valid FAT filesystem [ 818.961826][T11410] FAT-fs (loop1): bogus number of reserved sectors [ 818.981618][T11410] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c8307b5381c320e6c695d81054adb81df7811737a30d85505176fd95d1e7ae6e663d5fe078b0aae62e724d9f6a978c7315af5bc810f81613633db4816fa9a6eb2c4bb4f307ec4b85e66e4fdc363ca211d0dc809d250cb62d8003c68012a1d2fdcefcad539a51e8425f33d69c5048bb3cd8f7f64a71fafeabc7421ba9ee1abad99ef7008c37a8183cde5b14d5460453a68146ce6"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 23:00:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:57 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 23:00:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 819.721362][T11437] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 819.753617][T11437] FAT-fs (loop2): Filesystem has been set read-only 23:00:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 819.843072][T11437] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 819.878418][T11437] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 819.896493][T11455] FAT-fs (loop4): bogus number of reserved sectors [ 819.916089][T11455] FAT-fs (loop4): Can't find a valid FAT filesystem [ 819.925931][T11437] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 820.045734][T11459] FAT-fs (loop1): bogus number of reserved sectors [ 820.051648][T11436] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 820.081334][T11459] FAT-fs (loop1): Can't find a valid FAT filesystem 23:00:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 23:00:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 820.558550][T11479] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 820.653785][T11479] FAT-fs (loop2): Filesystem has been set read-only 23:00:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 820.705393][T11479] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:58 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:00:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 820.800779][T11501] FAT-fs (loop1): bogus number of reserved sectors [ 820.807704][T11501] FAT-fs (loop1): Can't find a valid FAT filesystem [ 820.819715][T11479] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 820.866614][T11479] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 820.948059][T11507] FAT-fs (loop4): bogus number of reserved sectors [ 820.958057][T11507] FAT-fs (loop4): Can't find a valid FAT filesystem [ 820.982822][T11476] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:59 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 23:00:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:00:59 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 821.618235][T11529] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:00:59 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:00:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 821.672875][T11529] FAT-fs (loop2): Filesystem has been set read-only 23:00:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 821.775797][T11529] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644"], 0x68) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 821.846425][T11550] FAT-fs (loop1): bogus number of reserved sectors [ 821.853141][T11550] FAT-fs (loop1): Can't find a valid FAT filesystem [ 821.876169][T11529] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 821.915514][T11553] FAT-fs (loop4): bogus number of reserved sectors [ 821.927926][T11553] FAT-fs (loop4): Can't find a valid FAT filesystem [ 821.974362][T11529] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:00:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 822.120529][T11528] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 23:01:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:00 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 822.682429][T11588] FAT-fs (loop4): bogus number of reserved sectors [ 822.690285][T11588] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 822.748687][T11580] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:00 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 822.801243][T11580] FAT-fs (loop2): Filesystem has been set read-only [ 822.813860][T11580] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 822.825314][T11580] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 822.837308][T11580] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:00 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 822.870275][T11579] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 822.934969][T11602] FAT-fs (loop1): bogus number of reserved sectors [ 822.994913][T11602] FAT-fs (loop1): Can't find a valid FAT filesystem [ 823.202398][T11612] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 823.249872][T11612] FAT-fs (loop2): Filesystem has been set read-only 23:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 823.318748][T11612] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 823.395754][T11612] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 823.452772][T11612] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 823.618906][T11611] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:01 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 823.696915][T11632] FAT-fs (loop4): bogus number of reserved sectors [ 823.705376][T11632] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:01 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c8307b5381c320e6c695d81054adb81df7811737a30d85505176fd95d1e7ae6e663d5fe078b0aae62e724d9f6a978c7315af5bc810f81613633db4816fa9a6eb2c4bb4f307ec4b85e66e4fdc363ca211d0dc809d250cb62d8003c68012a1d2fdcefcad539a51e8425f33d69c5048bb3cd8f7f64a71fafeabc7421ba9ee1abad99ef7008c37a8183cde5b14d5460453a68146ce6"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:01 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 823.941525][T11647] FAT-fs (loop1): bogus number of reserved sectors [ 823.978292][T11647] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:02 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 824.724785][T11676] FAT-fs (loop4): bogus number of reserved sectors 23:01:02 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 824.788852][T11676] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:02 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) [ 825.155245][T11689] FAT-fs (loop1): bogus number of reserved sectors [ 825.168536][T11689] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527ba"], 0x34) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527ba"], 0x34) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:03 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:01:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:03 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:03 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 825.843019][T11727] FAT-fs (loop4): bogus number of reserved sectors [ 825.890730][T11730] FAT-fs (loop1): invalid media value (0x00) [ 825.903631][T11727] FAT-fs (loop4): Can't find a valid FAT filesystem [ 825.908332][T11730] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527ba"], 0x34) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 826.448423][T11765] FAT-fs (loop1): invalid media value (0x00) [ 826.454728][T11765] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:04 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:01:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:04 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:04 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 826.860795][T11785] FAT-fs (loop4): bogus number of reserved sectors [ 826.893744][T11785] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff204"], 0x1a) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:05 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 827.657514][T11810] FAT-fs (loop1): invalid media value (0x00) [ 827.676504][T11810] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:05 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:01:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff204"], 0x1a) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff204"], 0x1a) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 828.105621][T11835] FAT-fs (loop4): invalid media value (0x00) [ 828.138607][T11835] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:06 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 828.546427][T11856] FAT-fs (loop1): invalid media value (0x00) [ 828.623070][T11856] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:06 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 829.018933][T11878] FAT-fs (loop4): invalid media value (0x00) 23:01:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 829.059998][T11878] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:07 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 829.329738][T11893] FAT-fs (loop1): invalid media value (0x00) [ 829.339159][T11893] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf"], 0xd) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf"], 0xd) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf"], 0xd) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:07 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 23:01:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 829.982161][T11927] FAT-fs (loop4): invalid media value (0x00) 23:01:07 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 830.026908][T11927] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 830.459979][T11947] FAT-fs (loop1): invalid media value (0x00) [ 830.473456][T11947] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564"], 0x7) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564"], 0x7) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:08 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:08 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 830.978801][T11969] FAT-fs (loop5): bogus number of reserved sectors [ 830.995721][T11969] FAT-fs (loop5): Can't find a valid FAT filesystem [ 831.107100][T11974] FAT-fs (loop4): invalid media value (0x00) [ 831.113249][T11974] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 831.286839][T11997] FAT-fs (loop1): invalid media value (0x00) [ 831.292879][T11997] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:09 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:09 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 832.025495][T12022] FAT-fs (loop5): bogus number of reserved sectors [ 832.032744][T12024] FAT-fs (loop4): invalid media value (0x00) [ 832.041016][T12022] FAT-fs (loop5): Can't find a valid FAT filesystem [ 832.045755][T12024] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 832.357168][T12049] FAT-fs (loop1): invalid media value (0x00) [ 832.372905][T12049] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x8080fffffffe) 23:01:10 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:10 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x8080fffffffe) [ 833.136929][T12077] FAT-fs (loop4): invalid media value (0x00) [ 833.162515][T12084] FAT-fs (loop5): bogus number of reserved sectors [ 833.170266][T12084] FAT-fs (loop5): Can't find a valid FAT filesystem [ 833.183037][T12077] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 833.492003][T12098] FAT-fs (loop1): invalid media value (0x00) [ 833.553269][T12098] FAT-fs (loop1): Can't find a valid FAT filesystem 23:01:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x8080fffffffe) 23:01:11 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 23:01:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 23:01:11 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 834.079915][T12120] FAT-fs (loop4): invalid media value (0x00) 23:01:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 834.152658][T12120] FAT-fs (loop4): Can't find a valid FAT filesystem [ 834.178900][T12125] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 834.248312][T12130] FAT-fs (loop5): bogus number of reserved sectors [ 834.248439][T12125] FAT-fs (loop2): Filesystem has been set read-only [ 834.304631][T12130] FAT-fs (loop5): Can't find a valid FAT filesystem [ 834.317751][T12125] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 23:01:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 834.429770][T12125] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8080fffffffe) [ 834.658490][T12109] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 23:01:12 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:12 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x0) [ 834.961796][T12163] FAT-fs (loop4): invalid media value (0x00) [ 834.973956][T12163] FAT-fs (loop4): Can't find a valid FAT filesystem 23:01:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 835.207836][T12181] FAT-fs (loop5): bogus number of reserved sectors [ 835.218309][T12181] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x0) 23:01:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:13 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:13 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 835.981361][T12204] FAT-fs (loop4): invalid media value (0x00) [ 835.998272][T12204] FAT-fs (loop4): Can't find a valid FAT filesystem [ 836.061946][T12210] FAT-fs (loop5): bogus number of reserved sectors [ 836.068954][T12210] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x0) 23:01:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:14 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:14 executing program 3: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:14 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:14 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:14 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 837.075298][T12251] FAT-fs (loop5): bogus number of reserved sectors [ 837.082034][T12251] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:15 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:15 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:15 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:15 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:15 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) 23:01:15 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 838.138414][T12289] FAT-fs (loop5): bogus number of reserved sectors 23:01:16 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 838.184007][T12289] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 838.672827][T12319] FAT-fs (loop5): bogus number of reserved sectors [ 838.709026][T12319] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:01:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:01:17 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:17 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) [ 839.606007][T12358] FAT-fs (loop5): bogus number of reserved sectors [ 839.635089][T12358] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:17 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:17 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:17 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:18 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:18 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:18 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:18 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:18 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 840.671403][T12403] FAT-fs (loop5): bogus number of reserved sectors [ 840.699019][T12403] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:18 executing program 2: socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:18 executing program 2: socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:19 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:19 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:19 executing program 2: socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) 23:01:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:19 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 841.686569][T12462] FAT-fs (loop5): bogus number of reserved sectors [ 841.733437][T12462] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:19 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:20 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:20 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:20 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 842.713119][T12506] FAT-fs (loop5): bogus number of reserved sectors [ 842.719678][T12506] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:20 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(0x0, 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:20 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:21 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xc7) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:01:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 843.444994][T12545] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ff"], 0x13) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 843.549556][T12545] FAT-fs (loop3): Filesystem has been set read-only [ 843.559047][T12545] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 843.570018][T12545] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 843.680078][T12564] FAT-fs (loop5): bogus number of reserved sectors 23:01:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:21 executing program 3 (fault-call:5 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 843.746494][T12544] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 843.780841][T12564] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:21 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 844.208331][T12588] FAULT_INJECTION: forcing a failure. [ 844.208331][T12588] name failslab, interval 1, probability 0, space 0, times 1 23:01:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 844.341733][T12588] CPU: 1 PID: 12588 Comm: syz-executor.3 Not tainted 5.6.0-syzkaller #0 [ 844.350101][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.360163][T12588] Call Trace: [ 844.363608][T12588] dump_stack+0x1e9/0x30e [ 844.368097][T12588] should_fail+0x433/0x5b0 [ 844.372648][T12588] ? alloc_pipe_info+0xe4/0x470 [ 844.377601][T12588] should_failslab+0x5/0x20 [ 844.382261][T12588] kmem_cache_alloc_trace+0x57/0x300 [ 844.387723][T12588] alloc_pipe_info+0xe4/0x470 [ 844.392513][T12588] splice_direct_to_actor+0x95b/0xb40 [ 844.397914][T12588] ? do_splice_direct+0x340/0x340 [ 844.403040][T12588] ? lock_acquire+0x169/0x480 [ 844.407796][T12588] ? do_sendfile+0x7dd/0xfe0 [ 844.412546][T12588] ? fsnotify_perm+0x64/0x390 [ 844.417244][T12588] do_splice_direct+0x201/0x340 [ 844.422154][T12588] do_sendfile+0x809/0xfe0 [ 844.426696][T12588] __x64_sys_sendfile64+0x164/0x1a0 [ 844.432033][T12588] ? do_syscall_64+0x19/0x1b0 [ 844.436735][T12588] do_syscall_64+0xf3/0x1b0 23:01:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 844.442121][T12588] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 844.448041][T12588] RIP: 0033:0x45c889 [ 844.451917][T12588] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.471515][T12588] RSP: 002b:00007f5234e22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 844.479941][T12588] RAX: ffffffffffffffda RBX: 00007f5234e236d4 RCX: 000000000045c889 23:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 844.488204][T12588] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 844.496194][T12588] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 844.504210][T12588] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000003 [ 844.512195][T12588] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000000 23:01:22 executing program 3 (fault-call:5 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 844.563194][T12607] FAT-fs (loop5): bogus number of reserved sectors [ 844.576807][T12607] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 844.877585][T12633] FAULT_INJECTION: forcing a failure. [ 844.877585][T12633] name failslab, interval 1, probability 0, space 0, times 0 23:01:22 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 845.001817][T12633] CPU: 1 PID: 12633 Comm: syz-executor.3 Not tainted 5.6.0-syzkaller #0 [ 845.010530][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.020582][T12633] Call Trace: [ 845.023886][T12633] dump_stack+0x1e9/0x30e [ 845.028326][T12633] should_fail+0x433/0x5b0 [ 845.033136][T12633] ? kcalloc+0x32/0x60 [ 845.037191][T12633] should_failslab+0x5/0x20 [ 845.041785][T12633] __kmalloc+0x74/0x330 [ 845.045952][T12633] ? kmem_cache_alloc_trace+0x24c/0x300 [ 845.051501][T12633] kcalloc+0x32/0x60 [ 845.055391][T12633] alloc_pipe_info+0x1fc/0x470 [ 845.060191][T12633] splice_direct_to_actor+0x95b/0xb40 [ 845.065563][T12633] ? do_splice_direct+0x340/0x340 [ 845.070584][T12633] ? lock_acquire+0x169/0x480 [ 845.075246][T12633] ? do_sendfile+0x7dd/0xfe0 [ 845.079852][T12633] ? fsnotify_perm+0x64/0x390 [ 845.084515][T12633] do_splice_direct+0x201/0x340 [ 845.089399][T12633] do_sendfile+0x809/0xfe0 [ 845.093843][T12633] __x64_sys_sendfile64+0x164/0x1a0 [ 845.099054][T12633] ? do_syscall_64+0x19/0x1b0 [ 845.103746][T12633] do_syscall_64+0xf3/0x1b0 [ 845.108257][T12633] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 845.114167][T12633] RIP: 0033:0x45c889 [ 845.118148][T12633] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.139267][T12633] RSP: 002b:00007f5234e01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 845.147687][T12633] RAX: ffffffffffffffda RBX: 00007f5234e026d4 RCX: 000000000045c889 [ 845.155669][T12633] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 845.164426][T12633] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 845.172415][T12633] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000007 [ 845.180390][T12633] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000001 23:01:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:23 executing program 3 (fault-call:5 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 845.503641][T12662] FAT-fs (loop5): bogus number of reserved sectors [ 845.510430][T12662] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:23 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:24 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:24 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r1, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x8, @remote, 0x5, 0x2}, 0x20) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 846.447992][T12728] FAT-fs (loop5): bogus number of reserved sectors [ 846.481491][T12728] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:24 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 847.397744][T12784] FAT-fs (loop5): bogus number of reserved sectors 23:01:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x0, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 847.468263][T12784] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:25 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea1"], 0xa) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x0, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xfffffffffffffcd0) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a0dcae644bd7062d99b9022abb97f707e566ac94bb606c17f3f85a79b2c7d40e34d84963dd29edd581f60368bc05bcf9683876b59513aa080000000000000001ac2a1dd595d6e5"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x0, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 848.290869][T12845] FAT-fs (loop5): invalid media value (0x00) [ 848.321892][T12845] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:26 executing program 3: shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r1 = dup2(0xffffffffffffffff, r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r4, r4, 0x0, 0x8080fffffffe) 23:01:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:26 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea1"], 0xa) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x0, 0x0) write$nbd(r1, 0x0, 0x0) [ 848.870036][T12881] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 848.887366][T12881] FAT-fs (loop1): Filesystem has been set read-only [ 848.894980][T12881] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 848.903671][T12881] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 848.911661][T12881] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 848.923914][T12880] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) socket(0x10, 0x3, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:01:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea1"], 0xa) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) socket(0x10, 0x3, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) [ 849.162475][T12910] FAT-fs (loop5): invalid media value (0x00) [ 849.188115][T12910] FAT-fs (loop5): Can't find a valid FAT filesystem [ 849.276493][T12908] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 849.414133][T12908] FAT-fs (loop1): Filesystem has been set read-only 23:01:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x1, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) socket(0x10, 0x3, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) 23:01:27 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 849.528360][T12908] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 849.575764][T12908] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 849.707783][T12908] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:27 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 849.818867][T12901] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741d"], 0xf) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 850.114483][T12955] FAT-fs (loop5): invalid media value (0x00) [ 850.122122][T12955] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:28 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 850.381381][T12964] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 850.441581][T12964] FAT-fs (loop1): Filesystem has been set read-only [ 850.478436][T12964] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 850.613297][T12964] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:28 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 850.661039][T12964] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 850.735401][T12957] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 850.995127][T12981] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 851.013301][T12981] FAT-fs (loop4): Filesystem has been set read-only [ 851.020554][T12981] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 851.038037][T12981] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 851.051184][T12981] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 851.109921][T12981] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 851.185006][T12979] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0xc6881, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fdfffffe) 23:01:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741d"], 0xf) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:30 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:30 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 852.707147][T13002] FAT-fs (loop5): invalid media value (0x00) [ 852.819001][T13002] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/363], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) 23:01:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="89"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:31 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741d"], 0xf) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0cef3d2c133ea6c839145594c7357e6686b4fc6b1c1c5dab024c3c91fb7d01a428f60a57ea817d890d4b0f974cea7d3045a84826fe540ccc06cbe802284105c567b1ff4d62cc9a5b000e95c9491cf2f7bdcfd17b718c3c5b6b8b661f0f8468ea47e4a307e734905c816dfe976f3478cb381ba3956026c175c1ca3673412f5ba8634e18882556d7f28c037ff23ed0aa2f84a168eebbbefc2e260a243bd54bb456e63dfe650000"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d5b16551092c02b1a0eb3aef7d7e3a1e59716a25d71414d6d940e2dd61e7fd6b006a64956cd06eb6de5f1946fd5c7659418345150b6a16e27833a241930063a6a70106b39c8a5e6dd65a8628a88ffcfb2aaf6f7aa1ea37a87de39e12feb6d843f979158a239f82da441d6efa51c83"], 0x1b8) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 853.643878][T13044] FAT-fs (loop5): invalid media value (0x00) 23:01:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYPTR64], 0x8) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 853.717994][T13044] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:31 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(0xffffffffffffffff, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:32 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:32 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4f179aa504a002cc22ae928c163386ac6eca90ae3725b18eec7942dbdcdc4936961e57afc8935b89f7b82b8a3c5af0912e8874d1cb30ed341a036baca692f414828b17b74f8e2a2f23764045b3a3f2be095b0c3d20b4b4b5e987390ffe585a4ec60ab040000000000007eef777b50146fad2e4bfefe9aca1fedafa06943f6636c23a00723a427654a4c17e95ac048e01d3a7bc1fd12e26cf7e389dd64a0738285cc"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readlinkat(r3, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)=""/212, 0xd4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000000)={0x4, 0xffff}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 854.548710][T13107] FAT-fs (loop5): invalid media value (0x00) [ 854.562069][T13107] FAT-fs (loop5): Can't find a valid FAT filesystem 23:01:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readlinkat(r1, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=""/22, 0x16) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r3, r3, 0x0, 0x8080fffffffe) 23:01:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd600"], 0x11) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4175554313b5fa7bba8b855d2ec36a7873d"], 0x14a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) preadv(r2, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/105, 0x69}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/85, 0x55}], 0x6, 0x26c) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="a038c4a42e43841595ef2102a0c773b900eb93260cdcc8cee43e93dffcaf5419c02afbaceda6e6730931965771c6715c97cf4970d735f21d0a00d514935cb7df46973893963a6c12c7a21a657fc89d42608ebcbe3a585da3f0508fcd94f54f0b2c6975f3ac49b9e1a86a556817b978aebcac6252048e70a4340100000029d7da41beac8a1626d65e4e4cf02d9e6a16f99b1c3208b764dfab4cbba3834441e4d3443a770eb5b7a0c837bb859f"], 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) sendfile(r1, r3, 0x0, 0x808100000000) [ 855.065784][T13123] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 855.080650][T13126] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 855.108906][T13126] FAT-fs (loop4): Filesystem has been set read-only [ 855.120432][T13123] FAT-fs (loop1): Filesystem has been set read-only 23:01:33 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 855.175956][T13126] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 855.193932][T13123] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:33 executing program 2: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 855.263169][T13126] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 855.279914][T13118] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd600"], 0x11) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 855.348551][T13120] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 855.505886][T13154] FAT-fs (loop5): invalid media value (0x00) [ 855.562773][T13154] FAT-fs (loop5): Can't find a valid FAT filesystem [ 855.703384][T13153] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 855.733649][T13162] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 855.772943][T13153] FAT-fs (loop1): Filesystem has been set read-only [ 855.789110][T13162] FAT-fs (loop4): Filesystem has been set read-only [ 855.866376][T13153] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 855.870669][T13162] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 855.932018][T13153] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 855.946542][T13162] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 856.001636][T13153] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 856.017571][T13162] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 856.047264][T13152] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 856.067833][T13161] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:33 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd600"], 0x11) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="ebe7f6cfdb00"/22, 0x16}], 0x4000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) getpeername(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000280)=0x80) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x10300, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1972055dcc79a6dd8480a0"], 0x1) set_mempolicy(0x8000, &(0x7f0000000100)=0x6, 0xffffffff00000) sendfile(r2, r2, 0x0, 0x8080fffffffe) 23:01:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:34 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 856.501338][T13195] FAT-fs (loop5): invalid media value (0x00) [ 856.517166][T13195] FAT-fs (loop5): Can't find a valid FAT filesystem [ 856.536390][T13202] FAULT_INJECTION: forcing a failure. [ 856.536390][T13202] name failslab, interval 1, probability 0, space 0, times 0 [ 856.569629][T13188] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 856.614232][T13201] FAT-fs (loop3): bogus number of reserved sectors [ 856.679517][T13201] FAT-fs (loop3): Can't find a valid FAT filesystem [ 856.702391][T13188] FAT-fs (loop1): Filesystem has been set read-only [ 856.709566][T13188] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 856.720928][T13188] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 856.729542][T13188] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 856.741338][T13184] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 856.755270][T13202] CPU: 1 PID: 13202 Comm: syz-executor.2 Not tainted 5.6.0-syzkaller #0 [ 856.763763][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.773822][T13202] Call Trace: [ 856.777217][T13202] dump_stack+0x1e9/0x30e [ 856.781561][T13202] should_fail+0x433/0x5b0 [ 856.786161][T13202] should_failslab+0x5/0x20 [ 856.790680][T13202] kmem_cache_alloc_node+0x64/0x290 [ 856.796024][T13202] ? __alloc_skb+0x94/0x4f0 [ 856.800547][T13202] __alloc_skb+0x94/0x4f0 [ 856.804981][T13202] ? netlink_autobind+0x28c/0x2c0 [ 856.810113][T13202] netlink_sendmsg+0x7b2/0xd70 [ 856.814891][T13202] ? netlink_getsockopt+0x9e0/0x9e0 [ 856.820166][T13202] sock_write_iter+0x2b4/0x3d0 [ 856.824973][T13202] __vfs_write+0x54c/0x710 [ 856.829417][T13202] vfs_write+0x274/0x580 [ 856.833682][T13202] ksys_write+0x11b/0x220 [ 856.838011][T13202] ? do_syscall_64+0x19/0x1b0 [ 856.842709][T13202] do_syscall_64+0xf3/0x1b0 [ 856.847230][T13202] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 856.853126][T13202] RIP: 0033:0x45c889 [ 856.857036][T13202] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:01:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000"], 0x12) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 856.877285][T13202] RSP: 002b:00007f7248fddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 856.885711][T13202] RAX: ffffffffffffffda RBX: 00007f7248fde6d4 RCX: 000000000045c889 [ 856.893692][T13202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 856.901667][T13202] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 856.909644][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 856.917623][T13202] R13: 0000000000000ced R14: 00000000004cf149 R15: 0000000000000000 23:01:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="413f4a9fe6fccc1d3bbde0544dbc23", 0xf}], 0x800, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) signalfd(r0, &(0x7f00000001c0), 0x8) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttynull\x00', 0x30082, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80000001, 0x305181) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:34 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:34 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 857.135628][T13213] FAT-fs (loop3): bogus number of FAT structure [ 857.183595][T13215] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 857.188896][T13213] FAT-fs (loop3): Can't find a valid FAT filesystem [ 857.200691][T13215] FAT-fs (loop1): Filesystem has been set read-only [ 857.208761][T13215] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 857.236640][T13227] FAULT_INJECTION: forcing a failure. [ 857.236640][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 857.259366][T13227] CPU: 0 PID: 13227 Comm: syz-executor.2 Not tainted 5.6.0-syzkaller #0 [ 857.260664][T13215] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 857.267836][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.267842][T13227] Call Trace: [ 857.267861][T13227] dump_stack+0x1e9/0x30e [ 857.267879][T13227] should_fail+0x433/0x5b0 [ 857.267895][T13227] should_failslab+0x5/0x20 [ 857.267906][T13227] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 857.267918][T13227] ? __kmalloc_node_track_caller+0x37/0x60 [ 857.267931][T13227] __kmalloc_node_track_caller+0x37/0x60 [ 857.267941][T13227] ? netlink_sendmsg+0x7b2/0xd70 [ 857.267952][T13227] __alloc_skb+0xde/0x4f0 [ 857.267968][T13227] netlink_sendmsg+0x7b2/0xd70 23:01:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 857.267986][T13227] ? netlink_getsockopt+0x9e0/0x9e0 [ 857.268000][T13227] sock_write_iter+0x2b4/0x3d0 [ 857.268020][T13227] __vfs_write+0x54c/0x710 [ 857.268043][T13227] vfs_write+0x274/0x580 [ 857.268057][T13227] ksys_write+0x11b/0x220 [ 857.268069][T13227] ? do_syscall_64+0x19/0x1b0 [ 857.268082][T13227] do_syscall_64+0xf3/0x1b0 [ 857.268095][T13227] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 857.268105][T13227] RIP: 0033:0x45c889 [ 857.268115][T13227] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.268121][T13227] RSP: 002b:00007f7248ffec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 857.268131][T13227] RAX: ffffffffffffffda RBX: 00007f7248fff6d4 RCX: 000000000045c889 [ 857.268137][T13227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 857.268143][T13227] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.268149][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 857.268155][T13227] R13: 0000000000000ced R14: 00000000004cf149 R15: 0000000000000001 [ 857.468614][T13213] FAT-fs (loop3): bogus number of FAT structure 23:01:35 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000"], 0x12) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 857.486768][T13213] FAT-fs (loop3): Can't find a valid FAT filesystem [ 857.526275][T13212] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 857.564263][T13235] FAT-fs (loop5): invalid media value (0x00) [ 857.574109][T13235] FAT-fs (loop5): Can't find a valid FAT filesystem [ 857.647142][T13248] FAULT_INJECTION: forcing a failure. [ 857.647142][T13248] name failslab, interval 1, probability 0, space 0, times 0 [ 857.707028][T13248] CPU: 0 PID: 13248 Comm: syz-executor.2 Not tainted 5.6.0-syzkaller #0 [ 857.715501][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.727238][T13248] Call Trace: [ 857.730635][T13248] dump_stack+0x1e9/0x30e [ 857.734995][T13248] should_fail+0x433/0x5b0 [ 857.739425][T13248] ? skb_clone+0x1b2/0x370 [ 857.743871][T13248] should_failslab+0x5/0x20 [ 857.748384][T13248] kmem_cache_alloc+0x53/0x2d0 [ 857.753162][T13248] skb_clone+0x1b2/0x370 [ 857.757427][T13248] netlink_deliver_tap+0x478/0x810 [ 857.762974][T13248] netlink_unicast+0x75c/0x940 [ 857.767944][T13248] netlink_sendmsg+0xa57/0xd70 [ 857.773263][T13248] ? netlink_getsockopt+0x9e0/0x9e0 [ 857.778825][T13248] sock_write_iter+0x2b4/0x3d0 [ 857.783717][T13248] __vfs_write+0x54c/0x710 [ 857.788417][T13248] vfs_write+0x274/0x580 [ 857.793238][T13248] ksys_write+0x11b/0x220 [ 857.797671][T13248] ? do_syscall_64+0x19/0x1b0 [ 857.802370][T13248] do_syscall_64+0xf3/0x1b0 [ 857.806885][T13248] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 857.812782][T13248] RIP: 0033:0x45c889 [ 857.817665][T13248] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.838433][T13248] RSP: 002b:00007f7248ffec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 857.847172][T13248] RAX: ffffffffffffffda RBX: 00007f7248fff6d4 RCX: 000000000045c889 [ 857.855350][T13248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 857.863462][T13248] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 857.871443][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 857.879856][T13248] R13: 0000000000000ced R14: 00000000004cf149 R15: 0000000000000002 23:01:35 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:35 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x420200, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x55}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4005) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) r5 = accept4$ax25(r0, &(0x7f00000001c0)={{}, [@netrom, @remote, @rose, @bcast, @remote, @default, @rose]}, &(0x7f0000000000)=0x48, 0x40800) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000240)=0x8) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 858.184501][T13266] FAULT_INJECTION: forcing a failure. [ 858.184501][T13266] name failslab, interval 1, probability 0, space 0, times 0 [ 858.198130][T13266] CPU: 1 PID: 13266 Comm: syz-executor.2 Not tainted 5.6.0-syzkaller #0 [ 858.206642][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.217327][T13266] Call Trace: [ 858.220632][T13266] dump_stack+0x1e9/0x30e [ 858.224989][T13266] should_fail+0x433/0x5b0 [ 858.229417][T13266] ? lock_acquire+0x169/0x480 [ 858.234255][T13266] ? skb_clone+0x1b2/0x370 [ 858.238855][T13266] should_failslab+0x5/0x20 [ 858.243373][T13266] kmem_cache_alloc+0x53/0x2d0 [ 858.248402][T13266] skb_clone+0x1b2/0x370 [ 858.252742][T13266] dev_queue_xmit_nit+0x2c9/0xb00 [ 858.257813][T13266] dev_hard_start_xmit+0x11d/0x3e0 [ 858.262940][T13266] __dev_queue_xmit+0x1a05/0x28a0 [ 858.267990][T13266] ? skb_clone+0x1f4/0x370 [ 858.272417][T13266] netlink_deliver_tap+0x5be/0x810 [ 858.277548][T13266] netlink_unicast+0x75c/0x940 [ 858.282329][T13266] netlink_sendmsg+0xa57/0xd70 [ 858.287211][T13266] ? netlink_getsockopt+0x9e0/0x9e0 [ 858.292420][T13266] sock_write_iter+0x2b4/0x3d0 [ 858.297290][T13266] __vfs_write+0x54c/0x710 [ 858.305462][T13266] vfs_write+0x274/0x580 [ 858.309818][T13266] ksys_write+0x11b/0x220 [ 858.314245][T13266] ? do_syscall_64+0x19/0x1b0 [ 858.319095][T13266] do_syscall_64+0xf3/0x1b0 [ 858.323627][T13266] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 858.329527][T13266] RIP: 0033:0x45c889 23:01:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 858.333425][T13266] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.353475][T13266] RSP: 002b:00007f7248ffec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.362409][T13266] RAX: ffffffffffffffda RBX: 00007f7248fff6d4 RCX: 000000000045c889 [ 858.370392][T13266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 858.378396][T13266] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 858.386384][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 858.394388][T13266] R13: 0000000000000ced R14: 00000000004cf149 R15: 0000000000000003 23:01:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f8"], 0x113) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 858.456208][T13259] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x95, "f55cbdabf9e5b7a1d8bf10fae45fa94c63e3878aa515590423abf0115c8592ff1103331c80a2ae7e6ff145596c8a2d0ecca659c4529c8d75dceae3cb2595c00175548d329e02132a11305f573532ed8db064a856513a93973996fd06af86af5c308ad47ec0073d70e3b25dcd4bc507e2b986c7204d86293bd6e7a71157572b0dbb94b55dd4f61e670da4e8e356ade91cbcaac5cf05"}, &(0x7f0000000000)=0xb9) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x72) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 858.505673][T13259] FAT-fs (loop1): Filesystem has been set read-only [ 858.540492][T13259] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd600"], 0x11) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:36 executing program 2 (fault-call:3 fault-nth:4): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) [ 858.845777][T13282] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:01:36 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 858.957918][T13295] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 858.967660][T13295] FAT-fs (loop1): Filesystem has been set read-only [ 858.977443][T13282] FAT-fs (loop4): Filesystem has been set read-only [ 858.995605][T13295] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 859.020870][T13282] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 859.026019][T13288] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 859.057703][T13282] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x2) 23:01:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd600"], 0x11) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x113) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 859.121359][T13282] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 859.143806][T13280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x4) 23:01:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f6ff7f000000000000000204186b2ce0d7815264", 0x16, 0xf5}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r4, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESDEC], @ANYRESHEX]], 0x8) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 859.440130][T13319] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x5) [ 859.501213][T13331] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 859.520366][T13340] FAT-fs (loop3): bogus number of reserved sectors [ 859.527954][T13319] FAT-fs (loop1): Filesystem has been set read-only [ 859.540404][T13340] FAT-fs (loop3): Can't find a valid FAT filesystem [ 859.566551][T13331] FAT-fs (loop4): Filesystem has been set read-only [ 859.584709][T13319] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 859.600876][T13319] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 859.603672][T13331] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 859.609677][T13319] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 859.637360][T13331] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 859.638923][T13317] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 859.653337][T13331] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 859.666741][T13326] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x113) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x6) 23:01:37 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd600"], 0x11) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 860.094296][T13367] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xa) [ 860.205463][T13367] FAT-fs (loop1): Filesystem has been set read-only [ 860.260667][T13367] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 860.306342][T13340] FAT-fs (loop3): bogus number of reserved sectors [ 860.337290][T13340] FAT-fs (loop3): Can't find a valid FAT filesystem 23:01:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd6"], 0x10) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc) 23:01:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) setresuid(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) r2 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r2, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r3 = syz_open_procfs(r2, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r5, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x400002) r6 = syz_open_procfs(r5, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000300)=0x0, &(0x7f0000000280)) ioctl$TUNSETGROUP(r6, 0x400454ce, r7) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r7, 0x0, r4, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, r7}, 0xc) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="a020cf1a750b993283a44b98d267c0fb666d980d0f118bad7afb0502b8fe897c9fa363cd852e05c6127cfbea34ce1b4d404ea53a20feba98622ef45ed74d27d2745f43871a68d35f8ff5ed8ff815bbb45911db85d0fbeba22de34730fdfc022ab00e63adfe40e3cb8153ed2b3d86447ad5a0417784f3d655bd68741f1f962d7ec6a12f7843c4728d690b95cfb57d475598c0467e15eec4e5d6a97000000000000000b89c068b1f73607e88a0ce1df7b70f834ccda6de6adccb2774e6748fbbf44aa40f93eda8084ddab34e71bd06940ce323f0952c2e1c168e382da7ab3c3c5d5f5f0450818598bfa0860fa4e64e3197da6b0a"], 0x1) sendfile(r8, r8, 0x0, 0x3) 23:01:38 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 860.658294][T13355] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf) [ 860.702970][T13355] FAT-fs (loop4): Filesystem has been set read-only 23:01:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x12f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x10) 23:01:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = gettid() tkill(r2, 0x1000000000016) r3 = socket(0x27, 0x0, 0x7) setsockopt$inet_dccp_buf(r3, 0x21, 0xd, &(0x7f00000008c0)="b9817ae8b784fb83ec954b18cb5dbd7a912ec4e479057a623628903f91fa86b8d032b2c1289e0043f2c88252f9df34ea920bbe387a4d87cf3a5c7b7958fb34eb9cb301e098748c19c8082ab02ae5b9a6d623fadc368da979cba2f6d2b4861c53e8739f844f547a32f5e08d2279eef23a70f7dcff43dc456b628d4277684d961e6ed4af5cc917b6bcefc87ae21a5a40ea9210d6c8f709fd7fa84d32f2503bebe585151ad76f0702d690818fe7ccbfa81b20ee901bda1adcd792b8e60a451f7e51fc3491a131971c22c19762e1ccca2b35e25752fb49d57b2a627bd336a272daa0f3195162d1c6eb331ef9d0f9f27bd3f30420ffcd006c2e0e32f7657e006cdbf6d7bd2ce3be4295cfebe829d51cf41fe524be3ba867a1e2bc75f26ef3fe1ab89f41b9b669187117d2dffe9f6fa2ea777ee35a38037310462e8858a5e77efe5c8b7f10d0d4a8381fc585fc4c95c339179b25065107404f354c52b0278f34cbf0405741c604f99645fb0bef42a32518379ad6fe418f0e7164145f0aaa9fe9d72a6f73f919ef348a539187d1996856a67620a52a449563cef78ebc070da9343ecbf2c7aa7099e145bcb99b5d0a64cda550cf315de0067f5b6619e944589349e40d8d8b4b55d6a56237d0f4cd36abf76e4cc811e3efe4fa6cd5e6aa38ba6dea80ba9ba32c4850bb1972ed6b9f874e581a79c5c7fd13cbf4a59b2f7cbce081249117a052a3ad7619a8c65b3ce89170fa3aeb4e4d0c29e40b30cc69eb9fb246f4c059691c1ae9311b0b0fce8d01f14cc833776b030106921db35a6ae0f02baa6cf15a4195de072659b07d1612ce62a4c81bbde5bee0237d114d751724d2c1350ef8c6d01da0ef098b3bd222e29ec9f3ecf245826f1c26400a73f97c249c2ed39dabd007cc89bf692d0fb456dce15da37f1ec2bd7b3132943cbc598eed024af2638a9212d4a60add09f0e8c097e7b8378eede5a116c286a7268abf875b912fbfebe9f93943d1e1305bf98d5bf97667d1813b1e7e84684b99b3ebce9a5e37459ef98e8dba9dc040b8fbb028c5af241ad5c82b6b4dac7af53f59b9981a3b9d91d78a4300fedbe2d483d3f67c2cb00ca3ac41cdac378ee2be8891f680581422f3d690798ce782dead5b7c28528d014e807f101ff53cc06f1533069736714a613794bea2d46b845464d85908e77964b1e91d2640e45f6195ab089388beb00e784d6210a31295a2ebc3e1c0a71c60004ea7de2a2dddea8e584856aa6df747155191c80da591863b25853eb12246d87ac30bd1be152ab462048c337a733e3daf82c8dca1dba941cd4b05dacd5b81df8a3a970e2b7b26b71926ae4a2d3f3d3a71be76ec037f2d3ce3ddc7803d6b86ca779d3555d72284d0388460f0a2bf0ded66a41651a9abab92789e578023077c556cf79f9c446faf32e5e255a487f33fe5cdbccd4f14931e32f71d13d7841672347845025f7ddb13315bbce954de390f6571099fec904e5a3883e4b964eac9c674264aceea45dc419dcb71c2a7c7520ffcc5bcbc6bffcbbb986808c0d04d7984a110d1af90af37689c689720587ef538643544330eae3de036020f0cc5b059e4fb989fe8479dfbf25fa1ccd0cf118c110800b2959c9e8397fa0578896461ba3c8549079d5afb8410948842b7a3f20c8c26c8a56e78c21856bf926a2be6e3f78a500c112691f75ec06722f1c817284273a6b14c6fa606f14b4357082f3a86ff621fd93ab163df48029c590a1dd1f336e7ab67a671d201a82a5059f8ed8eff5615eacec347956f6b6827c3aa32943c7d956957b6e90326d68283d9f0c05f956fb3d6cd85f45c3cf93534f57ec43962439ecec6a704ee49771557033ded444d6c9509dcd8da2128afcddfa0ce7d6d4fb86324ab6ce9c778d297de5e0c2abd58ef17be20e09284966b1967135e481a89e694bf3fa2a93ad3af36447e3d1af34ffa21e970d9f074dc5b746f19c0979dbb30b1f81e8b7679c029e3743e4f274cf7631913568031a6bb94bf57691bac90fb972c87e6819b5cfccff095e9ec1a11abda86f0d8b2c394b8a777b8553e72be6fa2a798c8597437350af36353e5d289bf44a374f4582a99d4e3dcda9c9f5fdaa87e4777716a02be0870cf3dc2de49cff3390e626e72772fe82b5d8d55e62b67023d94c56d979fe97018ad3672c98500f0bd5c20a4eec4157f4d8e9caa873bed9fd2aa24954372f7db6a361911bcfe01a5e80e156cfbfcdc10cd474ddb632e8f035b59fbadf22983cdd441457df84ea175cc0dcf1b4b082e3728057dc0b3b0b1b098d5e47aee2fa618b49d11852635cc30fc1a0c0542012615e7e192016891f92c5f5f92f210c581c23793f853d225816682a5d842ec76bb5601c7afe600f6ee9e0760dfcf12eb3171772d285f29ecf90a7f393d5996114a94656b582c09459806e33ebc350cc071d199dd7ac761042317539d4038b1a11133276a952f23b5e316d04ca42689f5c81d6bdde2532604c095e404907f0ec4fe431905587f7a813cdb7f60d608ddeb39483feaeff780cc0f5f8c8ea0d6942897473180cf273be1ad4363630e6c1395cb06ca91e6a5dac1c2ec01f2835f46a6513fdd078f242f8df2388d9475bbddcefe853b1da046c9f22de6194627bff58798ef36fb05f0b08c8a1f0b366486054f2f04b9acde6e80134521646fa26a6e4a6b9f4ee9928f49609810cecae0b409304a9d2b3ee4d0eeacdf65c2693b6bcd31ed318f1634c6d13f743acaa651442bb4ef8eeee025bc10be4fdeb6c581bf6197829c8ade4087a84375df9e3f79df02d1e5facbaaea9647fd959227cdaf9525809dcc4608f63a5effbf54c84bbbcbae2b613b169ca8e4576fad472fe3a324582fb05cddc246fdffb6ff58c16beb121a6ac1ce33aeee449a8b2d1662703988cb72a4e1c0f7402e6a3e3bb1072556f94acb5ea23b95d3b5f9c4a0f2e7d7586696ad69aee3a52d8604b46940337963ee6105afc20f1bc96d6dff802c46f003e8320cb729e2c973877131f56b7adeb4be5edef8b19c6c6ecf75b07c487c2bda534b1ace7c93555666a96db218cb8904e6dd6626d6d667fb4f8e4b05811fe336dcb1e64118e4781a48fe7eaf3abebd172e9451fec172d5932c1572b441479ac29d4c5aeb17946ba0d96cc16fe7b39b406fee08af373a9c6466bd757472faaa44bce028e7ccdb5dab5227402af5f1babfc05aa743d4603e5cc95fe06642f9a08ea84169816302c682a9db450eb4a80fb3b6108aa12889062270e9f8c17e92ffc4812365fe27398cdbf88a329111551ea545493c443ebe3abfa2328d558f4f475d089b5cff860dd1c5f66adddb713f8bfee15b5fcbd58cc6f8538ac54a4e45c4f872b36049c9c7679b43efa9db008d1df8e0d46c55f614d2c1f353819182f91ab548e7f6262a316c94a9b023f3e0ab8a98eee81621990d7afa30286c5ab40a4fe84b8d2fa604dd658b2adc81839315959f14abaf6b7d3585bee33a2c64c981e67c0cb52d4035bd78c543b9a092bf77ac21c7ec7c5fa4c373d921ecb2e2d3565605afba5aa8fd20cd2badc65585423dda5f4eed2bc6120abf2e9afe06a5ec5e2d258df148d8d3ea94052d08d41a30e84be5ba5d31f87044278292672a23c47a29ce154d93272c07ca8dcab45fd85fbe0bdec753085fcad1242222f520c5b9de05b3cbc6e6098a46b5751ea1f2e21eda0b120b34fd971622b5b51c6618240a55e2af57110cbca997d3c3f80a891d0cba30d713dc752e7c77b5ac35ce1cc03d71c6a6c353784d15ee54002b328f3298a750140014469862bf05218e6e5115dab704f12f9b52c5053f3b00ffe592ac8e2e6e3e4a503cf1b51fa7d3f9295dadca83187ed22162d84e46a90c30152f98dfa835a4dbeaaededda12b473bf435e80eeb51ff6ce2bbf8f2fa19d9838e9fcaae5c5b3ce215e0317e651c1cbaf9ccd6a52674b710342e43aa8b24072d18ae4164aa765bbadef00a4ba87dc11aa0bd1562cbaae8311448488cdbe500ef54d612d760ba99bd1dfdca62c86b304b3f28d2d20a03c8bfef3ad53b277d774a632015b6739dc50e7309bb69c9a37ed4fe0734dbbf68b35475b56199dca45f916175cccc1a0898c0e2b33545afba43adf1cb08b00b7fb2fa79db9c680952ae3668602d165b170cf00097b60c4fadf632b9871e81df0559af5c13cca53384fb8c6c49c25566b6e54d8e672751cb388e8ac42fe0f25226e0f2aa9905b81dbaeac3a3055e3ae87cf9523f7658ec20079c60b2a6b191fa5e7e8cd210d8104936d5f85ee7169499833fe8830355066cf54a02efe953d5fe44a6c911bbe40ee4f146f93c7d60eb3ac58862bfa0ac79304908425a7d78c24a278211e71e25c7c46ec17aba327d8d0eec72d5ad73ed0bffb506eda137aa682d65695318c6fbeb2ff419f7a0c56b0fad6951b5eab54cdffb56177550090c74e4992ab7564bdca5fecfd087a919381c26a42210866e26a5c15f37c6bb853a47f6e81de55309df3c103d85f80cc92ac6bce9460503d8a56e8c2b75a4562d190c1b0fe2d2d70a22fdc2c4cb98259ba6f98cf2108dacf42aee5be9a162a490541737150df75a4a10bf248e309814e23b9b222a3abd67d9167d6ec9f0b9df6342d0018f404ccb8c8b47412033cef0e43f59e20e5e93d26b7297156bc5434974c2cd988ab2db3b480894416df42f949c7782433d8ff706037003b6b7ea7056e948e404b898a9c497eef2223d7a1e72f25d21f8ef026dbfc6fcc7f20ca9b5b0a34168de0e595490a665e825d939958c6ce606c469487f33494461074caf12c4776b9183657986e42e60d70402833024926eb7ea405309a860978523bfe97145bf7b04c70fd63759cefb018ac24f8c9dcd5c9a018fa63be31e6ca8a74088c520de9c35c984a8353fd814cdeb0475d9c46ce48ca9e01d56db9274eca04199c99f59776661404786430d8e0693ba7a03d7715d6e1fcfd6f0aa8f90bf79683c21641c92461ad424b39904411fd01d0058190d799ee70d7f41e38299dbf43753ec560f661f5e3bbebba79f10a61c11f7318d0cc928847ed74142629ad3ccd0f7b95e758ecaa8242f39910cbc8ebea07a8d75b5243060fd0bd7201d840ffabf9e2cc52384577f777cd57d97d745fec704089dc637dbec1ef7dc57e6add2dd6fdc287ee042e54b6b325a3a175828524e45eb8f2463a5570bc7392790a891210d45ddad9d55b8de6c513b27cd275bf3e539a4a4c24c89f03ae484aa47dafbb790aff1c3473689ff6be2be01de099c9cc038298a8bee499e1b3993eb8bb80f24037ac6e3d1e0c825d49873a1b83872bb71c943e3d8769e0b8451cdf469b35066cb81368812b854573db529f98acba0fdfe6049ea8ee34e3060da288c3f72ce4b46c15785321995adcadf564b067f5b9fbfd07888fd08f2116fc86bb0d18e6c90be739bc1e123013e9275328b5221bf62fd680c9b9911b1f4e3e29613a88a2b57ae5a5af1b88525bfa149d664ab64c52f2d8d8e11047d6666de0a4f40f02fedb0c30b4e7d6094cf659ff93225607aef3fd29e70c5f5628622db62395dab1b0ee03cbf9cd5d709675eefb58cd11583cace9c2bb7d00abe4da8e1d9100224951a679d9ae948e62a2b984a8e742b102f00d4f0253c5daa4efaf248ea1607463f11e84bd3fca1f51d71ae18a11dc24c62bd12a8339e595188cb0879dd40d3393e5b31a5e30e025edc3dade2bbab9cef6b3d12b5571e04e5acb9e3fd789847663273e186c4812787c4add3d9961901a00d5ed2c12085c369bfc376ca20bae9bff2209d3989", 0x1000) 23:01:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x60) [ 861.197251][T13424] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 861.266609][T13424] FAT-fs (loop4): Filesystem has been set read-only [ 861.293764][T13424] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 861.319629][T13424] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 861.348452][T13424] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc0) 23:01:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x12f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 861.375641][T13392] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 861.403172][T13423] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 861.408395][T13392] FAT-fs (loop1): Filesystem has been set read-only 23:01:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd6"], 0x10) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:39 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x500) 23:01:39 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 861.800989][T13452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 861.819816][T13457] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x600) [ 861.943133][T13452] FAT-fs (loop1): Filesystem has been set read-only [ 861.955919][T13457] FAT-fs (loop4): Filesystem has been set read-only 23:01:39 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r0, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 862.006421][T13452] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 862.018121][T13457] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:39 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 862.060022][T13449] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 862.070492][T13457] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 862.109823][T13457] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 862.160846][T13451] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r3 = open$dir(&(0x7f0000000000)='./bus\x00', 0x408000, 0x2) sendfile(r2, r3, &(0x7f0000000100)=0xff, 0x5464) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xa00) 23:01:41 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x12f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd6"], 0x10) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:41 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc00) [ 864.359532][T13503] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:42 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xdc4) [ 864.405951][T13503] FAT-fs (loop1): Filesystem has been set read-only [ 864.490036][T13503] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741d"], 0xf) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xec0) [ 864.933800][T13533] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 864.990432][T13533] FAT-fs (loop1): Filesystem has been set read-only [ 865.019964][T13533] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x47) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf00) 23:01:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x13d) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:43 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="e071904033ced375de6d9c6c8170d2a0"], 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x674}, 0x4) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x3f00) [ 865.413226][T13555] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 865.432564][T13557] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 865.457887][T13555] FAT-fs (loop1): Filesystem has been set read-only [ 865.469731][T13557] FAT-fs (loop4): Filesystem has been set read-only [ 865.489954][T13555] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 865.512078][T13557] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 865.539180][T13555] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 865.557937][T13549] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000400)={0x3, 'vxcan1\x00', {0x7}, 0xe377}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r3, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1001820, &(0x7f0000000300)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_mmap='cache=mmap'}, {@nodevmap='nodevmap'}, {@cache_mmap='cache=mmap'}, {@mmap='mmap'}, {@loose='loose'}], [{@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'md5sum$'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x33, 0x31, 0x32, 0x64, 0x36, 0x63], 0x2d, [0x34, 0x63, 0x34, 0x33], 0x2d, [0x66, 0xf, 0x37, 0x31], 0x2d, [0x37, 0x33, 0x34, 0x34], 0x2d, [0x66, 0x61, 0x36, 0x36, 0x36, 0x32, 0x33, 0x30]}}}, {@dont_hash='dont_hash'}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_type={'subj_type'}}]}}) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 865.640690][T13555] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x4000) [ 865.688062][T13547] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:43 executing program 3: lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x7ff0}, 0x16, 0x1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x10}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="e151205e3abd231ccdd1dc4016108ea06d6b70e0279415c5a069828fc2c368ccdad4dc010bbcf3370b9cc7beee540e52603d8f659590e813a3634e2e402bf35f70d278c34146858dc6f5f9fe8784064609bcf4fdede37ba31b43dc3ae0a3ac8763bbd1d54c4fe5dfa54e92a5a46685bfd510c2fbbc7c7d74833d275617517c47f5cb252f915da447740a6341e9240a38ab6f35a0e3578a"], 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r4, r3, 0x0, 0x8080fffffffe) 23:01:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x4788) 23:01:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe3"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:44 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x4888) 23:01:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x5865) 23:01:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v1={0x1000000, [{0x3, 0x2}]}, 0xc, 0x2) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="e6cad711920312b1a933c043312b5eee51c39a1803658719ed903899838342e7c2bc72d457059a50db92ed642d0e922a85f8e51fc980cd873f61652c008ab75d8411119772f041235690e4956f814ddf6470038ad3c0c1076b305dbdf319820c09a332", 0x63}, {&(0x7f0000000300)="14b8ca481dc7962e456005b0613a1831601342fec20e27771c65168ea22137ed74a6bd4ca0122963c6b82ae34cf6f73c43939fe3696e4a04b73986aeab7c2bf0751202ea554d7314cc2032741add101b096289b2902eb2829ee1a514eb5639a3fa8eaa37d0bf539129cff77bb48712616d0a73bbf0ca4ffd3259f99bc0e24d47cf40f87ab5738ceef49beca999fa90b883e040f816609dae494b58a268dfc236c975f50c1dd049d1d487f2116f19fe0ff5b1f2eaac07994daeba3d7f1db3eec8aa6b59b834b72a7f2f708c04166c1d37700a3a736dc64c14faa8", 0xda}], 0x2}, 0x8000) fchdir(r0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "baba937cc8bc7511", "3e2b9add20b5ff80bf1f2ee668d8854706850d3df697b9ef8a780703d0c19fe9", "2b962bdc", "acdfe6680e6efa88"}, 0x38) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 866.645548][T13590] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 866.674861][T13590] FAT-fs (loop4): Filesystem has been set read-only 23:01:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x6000) [ 866.990232][T13647] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 867.032454][T13647] FAT-fs (loop4): Filesystem has been set read-only [ 867.050119][T13647] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 23:01:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@pppol2tpv3, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f00000003c0)=""/160, 0xa0}, 0x40000000) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a0090bfb4a5a02f75c459ef560e5890e98d417da16ffa12053a018693a11c0bffe350f51d42a956b03a191004d88d170905ee227d47ed6b65bc894bf4d201e6b37af44a15d9e2cb32bbb29c6d51abd5abb6520c4367472464df38ef6b5b032e252f8e0740e075cf381fa9dd3615bdacf1f55f52ee710d377bf68755cc4754c552aed06aac91f7e91e6c6d3802dec6c8ed347e1d9ce5bd6abf1b1e4348030b8303a50aad5df8a7e63fdd3a15827714ff3391500d2da"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 867.082657][T13647] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:45 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 867.151512][T13647] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 867.167481][T13647] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 867.182553][T13644] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x6558) 23:01:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x48080, 0x114) fchdir(r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x4ad2}, 0x6d) write(r1, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "53f608", 0x7}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 867.322281][T13665] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 867.353860][T13665] FAT-fs (loop1): Filesystem has been set read-only [ 867.371049][T13665] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x8100) 23:01:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf"], 0xd) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x8847) [ 867.611728][ T27] audit: type=1804 audit(1586473305.412:149): pid=13697 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1112/bus" dev="sda1" ino=16375 res=1 23:01:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100)=0xcd7, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a2"], 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) sendfile(r0, r3, 0x0, 0x80000000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r4, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 23:01:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 868.009510][T13708] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x8848) [ 868.057998][T13708] FAT-fs (loop1): Filesystem has been set read-only 23:01:45 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf"], 0xd) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc000) 23:01:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc00e) 23:01:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./bus/file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x16b}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x42400, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x1ff, 0x2) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statx(r4, &(0x7f00000001c0)='./bus\x00', 0x800, 0x846, &(0x7f0000000300)) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 868.716753][T13746] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc40d) [ 868.822658][T13746] FAT-fs (loop1): Filesystem has been set read-only 23:01:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x125) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 868.897989][T13746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 868.956114][T13746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:46 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 869.034683][T13746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xeffd) [ 869.102651][T13743] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf"], 0xd) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clock_getres(0x4, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000400)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000480)="bedf504c6cba41cb36945d5cbc9e95c34a6da5fa40676b14a607c706c98eee877961635d2b81a57b321b1cfa5364b6ab882f64d6c02b15d700a670c7724a707f6bf799d88b16298ff8ee34b51a3ca691c94eee4690fa4cf42a724addbd11e7a1", 0x60}, {&(0x7f0000000500)="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", 0xfb}, {&(0x7f0000000600)="0b32a0d3c7aff0a6fb6dbaf1965f038b79b28b482a1f9dc628f079ea0bc38341cc5e6184cf8e1f84e18940ac489e7d953a8b73cdaaf2aa42d599d720a49e40ab04a7c1c241e2086f5b2518fc3d9b5504be9e52af0f71970f97af20510cdefe65eee1a387081ebbfff198fd00230a0071cfaa5dbf6c0812113984f8d28cad15cc626b6b9c41dab230dc9e269f609c06366f2b5279cb455a2d99637199a087ed16a3aca5fab1def0e0b49b9f9458bb24b3feedd11ac1878514ab4ee917c7813f50de2aa838dd68957cf5e6e3e705d94a535e770e0e8551926e5306f1536a11d25613177106ac96681faf24d52dd98664116cf1f94f81b8", 0xf6}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000100)}], 0x5}, 0x8880) write$cgroup_int(r0, &(0x7f0000000040)=0x7, 0x12) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="36e04648ea45ef070059d91b3306c823b7b8e369c6f951a611aeb6a5577c49e8728f250c115512798f7cee96f40265f917dd6fdee51cd39f44f1e5cdad63120f3e8e6fb5fc4b232fdc7736de3c"], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4f, 0x0, "f3b7ac1bfeead95f3151a8b8347caa08cd6e2bca1602bd1e7d6d3051cc731d5a1ba72e05d11b21b30dc075beada1ed34e302e05b0e6a0eb312eca7021f3a3e59d3e3b32959dc0b26a9ed039f6cdc3977"}, 0xd8) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000001c0)=""/79) 23:01:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xfdef) 23:01:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x505040, 0x40) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="03", 0x1, r2) keyctl$update(0x2, r2, &(0x7f00000001c0)="5803e5f8ce26dd82c79dfbfed98d15624580b5035cd46827358fca47f455f69bfab6dc82a22c8c870e14338141e790db62158100d4bb88312bb227aae7e433743bb949e606be94eced7a366e9cf6fd2d2149adf54e6afca4daff75", 0x5b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RWRITE(r4, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x8}, 0xb) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x33fe0) 23:01:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 869.632796][T13800] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 869.674336][T13800] FAT-fs (loop1): Filesystem has been set read-only [ 869.702790][T13800] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 869.711342][T13800] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 869.729634][T13800] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 869.741991][T13795] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r1, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) recvfrom(r1, &(0x7f00000001c0)=""/66, 0x42, 0x40000000, &(0x7f0000000240)=@caif, 0x80) fchdir(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000003c0)={0x8, "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"}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r4, r4, 0x0, 0x8080fffffffe) 23:01:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:47 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf0ff7f) 23:01:47 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) ioprio_set$uid(0x3, 0x0, 0x8) [ 869.983584][T13786] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 870.013402][T13786] FAT-fs (loop4): Filesystem has been set read-only 23:01:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:48 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x0) ioprio_set$uid(0x3, 0x0, 0x8) 23:01:48 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xef6, 0x8402) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xfff, 0x4) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x4, &(0x7f0000000500)=[{&(0x7f0000000300)="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", 0xfd, 0x40}, {&(0x7f0000000400)="c9f53f5db3a57067277bacd1bfe5e96b65eb170fb29e1b56508f0b22cdd8825788bc4d19eb251f87afac48564da3bce23bf24f5a19e6a5fd84f73d3e26f832560da0207d0af885bdbfe154364ca4304b10f5e04802e8f070b3b799710c90bb2bf3a3598aaac481d69393f2958b921682a5ecb5b5d065df9da733ce0cd9690d8be807f50719333a3ec6e2d24cfdbcfba9aa4d99dff1", 0x95, 0x7}, {&(0x7f0000000240)="9e374303b62bd32c29e59026f5310dac8cbec89d9a13cd66a4278aa78d679ea5e3eab95b559e78d270da6e386d6747ff05600ca6e22ba246ab9e12e5001739c9ad71c44d169aaf63179944b3d39d37f59d79102a1700b543b4acd8a9c7615bc9937a2d56399550982d247736748695a542fd4906e66c785a", 0x78, 0x7}, {&(0x7f00000004c0)="27ee7de55b57e7bbce12c8b1a8c7e90e", 0x10, 0xb1}], 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="6e725f626c6f636b733d1974372c687567653d61640c09aea910766973653d76666174002c687567653d6e657665723d2f6465762f5c63737523002c7569643d6b281533ee9c32e53036421e50a6e08a340362e79798ec72ad072b1aaa8dd074d69637b2f29d360318e76d19d4f0a0e4864704a66b60a5c47896f15127ac24765f793cda753bbf76f24714c35f1a5764357660efb7e3e39dabf993d8ef1dfbfe1d9e38740eea4adabaf7aeee052243126f9f7b1cd717a09c5753dd6b4fb2ba3e0211d5cb9ec3adcc28a494a8cd3bb5d3a5aa1b3daa3034c110e4c07367aacc5743edb0d6f0adfc4ba59773aa7b5e8d", @ANYRESHEX=r2, @ANYBLOB="2c687567653d616c776179733d76666174002c6d706f6c3d6c6f63616c3d7374617469633a3a2c6f626a5f757365723d75736572292fef2a73656c696e7578736563757269747973656c696e75782d6d696d655f74797065362c646f6e745f61707072616973652c646f6e745f6d6561737572652c686173682c66736d616769633d3078303030303030303030303030303030342c00"]) fchdir(r1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="04674f0da0"], 0x1) sendfile(r3, r3, 0x0, 0x8080fffffffe) 23:01:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x1000000) 23:01:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) signalfd(r2, &(0x7f0000000000)={[0x40]}, 0x8) 23:01:48 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x0, 0x0, 0x8) 23:01:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x13a) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x2000000) 23:01:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x4000000) 23:01:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 871.312666][T13900] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:01:49 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x0, 0x0, 0x8) 23:01:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x5000000) [ 871.383759][T13900] FAT-fs (loop4): Filesystem has been set read-only 23:01:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xffffffdffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204016966000270fff8", 0x16, 0x7}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 871.427396][T13900] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 871.488722][T13900] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 871.504301][T13900] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 871.537293][T13895] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x6000000) 23:01:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) ioprio_get$pid(0x1, r1) fchdir(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x4) 23:01:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xa000000) 23:01:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e"], 0x93) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 872.019567][T13943] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 872.050593][T13943] FAT-fs (loop4): Filesystem has been set read-only 23:01:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc000000) [ 872.086416][T13943] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 872.118981][T13943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 872.163082][T13943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:50 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x0, 0x0, 0x8) 23:01:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 872.207096][T13943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 872.218623][T13937] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf000000) [ 872.568463][T13979] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 872.603102][T13979] FAT-fs (loop4): Filesystem has been set read-only 23:01:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 872.617031][T13979] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x10000000) 23:01:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 872.955672][T13965] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 872.985309][T13965] FAT-fs (loop5): Filesystem has been set read-only [ 873.017197][T13999] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 873.050569][T13999] FAT-fs (loop1): Filesystem has been set read-only [ 873.557629][T13992] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 873.598405][T13992] FAT-fs (loop4): Filesystem has been set read-only 23:01:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x3f000000) 23:01:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e"], 0x93) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:52 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x0) 23:01:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x40000000) [ 875.024277][T14015] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 875.039332][T14015] FAT-fs (loop1): Filesystem has been set read-only 23:01:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x488003, 0xe6) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r1, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) fchdir(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) 23:01:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x60000000) 23:01:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 875.514779][T14045] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 875.526660][T14045] FAT-fs (loop1): Filesystem has been set read-only 23:01:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x9}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000180)="aed40b6cacd0823dd8944a33e27b811ae15a2128446f536031eaea97f8365a87f92aa505854d7304e2ad300ec52fca0b89c2b13fffb8ea45107e0b3896c47fbccbadda1c645aea08729d8aea66703e7fc9568040ad06ce8ff6b82667118e53e928b9b59adeff6bbe3801eff9c99ff8f08ef7291d8f94d9c8d5b84020503a8888153923159ba08f67d5c95ae0705142754563be31709ea04c2b1646e5ed96416f5b5e8819971f32e74401bf73cade56196dd41a4c11f2f7cadbcb20e040b9da85c47d281152d05c0224418b1f03a700e4356ba44549070644a39ab9fa3ae23b4ca4f8efc5ee62e36e4f4fdfdcf4aa4e", 0xef) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8a1381c7c9bb4b1c, 0x24) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r5, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) sendto$l2tp(r5, &(0x7f0000000300)="b9359efb34540f62c8a7f4c8b0ecefc1a1c601ba9d0f601f2b4c538a4a1a5418e3cbf1509a0051a726a88b48a1eb49adf4f751916b3631a177968b79e9ef4e25684805e56889fd79d6d6a4c6b10d4ee356c338bfaee87fd16500f5161bafdac2e5aa51fd23e3d6f847a68411d56cb6715fc2715aca1a26d65ffcc02ec8ba1c974e51aaa90b11f20a7a6fb4bc0d587b1d9f426fd0ec70cdea5bb8a022", 0x9c, 0x91, &(0x7f0000000280)={0x2, 0x0, @rand_addr=0x9, 0x1}, 0x10) write$binfmt_aout(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r4, r4, 0x0, 0x8080fffffffe) 23:01:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x65580000) [ 875.677187][T14022] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 875.739339][T14022] FAT-fs (loop5): Filesystem has been set read-only 23:01:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e"], 0x93) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:53 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x0) 23:01:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x7ffff000) 23:01:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x22) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) socket(0x22, 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000000c0)=0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2202, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xa524) [ 875.919732][T14069] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 875.946449][T14069] FAT-fs (loop1): Filesystem has been set read-only 23:01:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 876.053469][T14079] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 876.109043][T14079] FAT-fs (loop4): Filesystem has been set read-only [ 876.112757][ T27] audit: type=1804 audit(1586473313.902:150): pid=14085 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1127/file0" dev="sda1" ino=16383 res=1 [ 876.154150][T14079] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x81000000) [ 876.252738][T14070] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 876.279531][ T27] audit: type=1800 audit(1586473313.912:151): pid=14085 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16383 res=0 23:01:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x138) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:54 executing program 0: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x0) [ 876.760309][ T27] audit: type=1804 audit(1586473314.552:152): pid=14095 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1127/file0" dev="sda1" ino=16383 res=1 23:01:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 876.809034][T14086] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:01:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0082ed49a87f091e50b00a599d84f5ecf0a0d59c9e2c8cd87f93bf115c84dcd3fa30cbbaa6f3e1972ed6f66408b8d8fea5384393e5d38b2aa88cd9b58e2f50607c8b6691b429f4df91edf60b3c6a7d9917179a4fb9a27df2cc561009a8e5653ac42988e0713ac3ab9117f09f0851c8ab0aca6726a1f79adbdcbde55eed0ed5"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 876.917417][T14086] FAT-fs (loop5): Filesystem has been set read-only 23:01:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x88470000) 23:01:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x138) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 877.087256][T14117] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 23:01:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="7062afe172f77d965e43928a1dd9eadbb3031719efd998d5397ca1a949d85adcc377b06837906f7b3c91782ef09edd0bee3675458ff1ca07cfde88e975be88a4180b2ea1eab0afffb3149b92dfbbf8639a46b9955c2732f653a45e18626142bdc9aa1fab7fbfbca8d0a017cb721b52153e594d9191f7d9f339f88cf205b22606bb9f947cb0b37c22c5f2f847ea6ce1658da125ec04e0156fa3954ee7d1a9a71778f9822230a3a6acaa285cde73ecde7782dbf805eec03d2be45cc1439dc83d32c4d5e9f46066f2d839e5757982", @ANYPTR, @ANYRESDEC=r0, @ANYRESDEC=0x0]]], 0x10) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) 23:01:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x88480000) [ 877.136613][T14117] FAT-fs (loop1): Filesystem has been set read-only 23:01:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 877.206063][T14133] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 877.242546][T14133] FAT-fs (loop4): Filesystem has been set read-only [ 877.278124][T14133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 877.323414][T14133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x88a8ffff) [ 877.377710][T14133] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = getegid() r3 = msgget$private(0x0, 0x0) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r5 = syz_open_procfs(r4, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) r7 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r7, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r8 = syz_open_procfs(r7, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r8, 0x400454ce, r9) msgctl$IPC_SET(r3, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r9, 0x0, r6, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5, 0x0, 0x400}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x81, 0x7, &(0x7f0000000500)=[{&(0x7f00000001c0)="dd6ae126f554820fc1153318e603671e9450b33f5a98a1625cf0f0931c449fae3ceafff1a46569ca98d82b7d68a9c5af6975c7db7da3b4f52f9934affd7a2475f257c817cec2057dd2cc14b31d83dd6606c1ec9df00ac5620571c37bafe6884cbc73c744f9e0456c5fb64633fb36ea1fadeed968802b7123f14686d183c63bee20aae3203c38caad3266b9c02db17545404f4600e08cf19dd8d2c223ab9e76458bce8ae75ac7ab41230be83a555cc92083f8fcf89405b10e1932e460b37255b24838e03a9cbea4ebae0bef438f76111586844792a30b945b2db833f09cb44f5ebed3d0d21e5f442146277d7cdb278ab46c6e2fc02bbf457f1ca0", 0xfa, 0x10000}, {&(0x7f0000000300)="b9b35da90a6d37737257cf502e1f37ebd56009d5fda827236e2e3965b1a6c29800b956f97ac463cfa44ccdaff580ebc2fc35f536ed4e2d257e376f1b37b5ee2c1f06299dcd5821bd4000d21bcc6bb07673ad2026017d400d618e0441b4f4ff3c5226a47f13a3b29e7d12ac5256bc1e22a9b6f05edbcaa349d050d520c5d2b0", 0x7f, 0x2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000380)="f27e4291ff5c408add3cff169e12072a00107addf99c4776db9a019abb503f7a679cb511279915b7f9bfccf6c4ac535525fafd86f0063ffd7cc172be881a619d49db9a", 0x43, 0x6}, {&(0x7f0000000400)="14eed8e8ec0846747157f95040e12379eb51ffe067eaebb8549a7299e8b3", 0x1e, 0xd24}, {&(0x7f0000000440)="4d138000dd858b051a001977e580d8c4ebb5b84f33600f3cdb62072d8cf5c5d6c035f2af5ce3b5e30887a38d9c2fa03cf1c463101bb03b9f89fb440f0009960d17b7c18f7bff", 0x46, 0x3}, {&(0x7f00000004c0)="91f16ff349c01811b86cf809d7c3811d6645792af05e610bceb50a", 0x1b, 0x6}], 0x1020000, &(0x7f00000018c0)=ANY=[@ANYBLOB="6e6f696e746567726974792c6572722f72733d178823e12ac092a9726f2c6769643d3e59f96d6415590b6173f601ca0f9d1dddb831ff6a0f2257a8ec503cee94ed6c61756cbdaf12239eb55e48402f4b600e2d06706ef0cfc6e08b4ab32159ca56546bccda5ae750df02de34a5547c442e3d1192e0ebc1d98b1f357d615d97cd88e7f06567bf9ceda2d4dfdb1f2504800c5656ff77b8e2f5a5ab5d14b698a2076ef1982bd1ad26a576dddc1b43726a92e2605cc01f1fa304ecde61a63f7d", @ANYRESHEX=r2, @ANYBLOB="2c726573697af13d5af03030372c6769643d", @ANYRESHEX=r6, @ANYBLOB=',quota,fsmagic=0x0000000000000002,seclabel,smackfshat=,subj_type=vfat\x00,fsname=ppp1,measure,func=MODULE_CHECK,\x00']) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 877.458462][T14132] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 877.483924][T14151] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 877.491965][T14151] FAT-fs (loop1): Filesystem has been set read-only 23:01:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x9effffff) 23:01:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98"], 0x138) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x22) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) socket(0x22, 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r2, r3, 0x0, 0x10000) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000000c0)=0x9) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2202, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xa524) [ 877.683391][T14163] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 877.697866][T14163] FAT-fs (loop1): Filesystem has been set read-only [ 877.844256][ T27] audit: type=1804 audit(1586473315.632:153): pid=14178 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir978755226/syzkaller.Ba5uuY/952/file0" dev="sda1" ino=16366 res=1 [ 878.048265][T14138] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 878.074668][T14138] FAT-fs (loop5): Filesystem has been set read-only 23:01:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc0000000) 23:01:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}, {&(0x7f00000001c0)="58efbd3a55b7c527ff5f147dd13738887f688807c933f17c3a12d7a3ece20cfecbe82e2f5604503de4eeb7ee45cacd42be740e2fed109dbcfa143298c48ab63010c9518c71dd755e3ca2b9c2d8336eb0", 0x50, 0xfffffffffffffffb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300)="36f55c0e13c386f427b3333ca51e819735231d821ddddd996cefdf02dc448595c2e281bc17d74f566d5caa535075e0e0b19c31ff64b0b7983813e252115bea02a3966d4469065f2b081e04f562288b6d5d747849a414cb2d42ab19bd03f7d8d90b7ae2b6a0e59449527819260b56f27088a5aa6a2958be389e0e640f8966a8e5483efba5d2d98b95a7a0db984fe1e6b427cdd3e1a211565d2c854f9d3769e08d6f76d31f8db1e545e0", 0xa9, 0x20000000, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x101000, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 878.079431][ T27] audit: type=1800 audit(1586473315.642:154): pid=14178 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16366 res=0 23:01:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc00e0000) 23:01:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 878.534398][T14175] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 878.543283][T14175] FAT-fs (loop4): Filesystem has been set read-only 23:01:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6gretap0\x00', 0x1000}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="42e76b51e7dd2a4f337e7a21e9f22e3f28aa2ae3f9e760f555832edfb051869793d61764d036f7c6575b9f56a497d6d1dd4d41cd3f4f4624c982c298697dc5f2a7a02f999a6f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="011ca6912a"], &(0x7f0000000000)=0x3e2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @local}}, [0x9, 0x1f, 0x40, 0xe7f9, 0x7fff, 0x20, 0x8000, 0xfd9d, 0x3, 0x7fffffff, 0x4, 0xff, 0x1, 0x8, 0x7]}, &(0x7f0000000340)=0x100) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000240)={0x400}) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x9) 23:01:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc40d0000) [ 878.684086][T14205] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 878.726453][T14205] FAT-fs (loop1): Filesystem has been set read-only 23:01:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xe03f0300) 23:01:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 879.033613][T14235] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 879.048568][T14235] FAT-fs (loop1): Filesystem has been set read-only 23:01:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3"], 0xdc) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xeffdffff) 23:01:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:01:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xefffffff) 23:01:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 879.605047][T14225] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:01:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf0ffffff) [ 879.653342][T14225] FAT-fs (loop4): Filesystem has been set read-only 23:01:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00'], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xffffa888) 23:01:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x4, 0x8e56}) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xfffffdef) [ 880.208134][T14253] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:01:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) [ 880.277843][T14253] FAT-fs (loop5): Filesystem has been set read-only 23:01:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x101) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x20, 0x1, 0x7}, 0x473}}, 0x18) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:01:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xffffff9e) 23:01:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xffffffef) [ 880.669431][T14275] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 880.690336][T14275] FAT-fs (loop4): Filesystem has been set read-only 23:01:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 880.713583][T14306] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 880.723211][T14306] FAT-fs (loop5): Filesystem has been set read-only [ 880.730868][T14306] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 880.740127][T14306] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 880.749896][T14306] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 880.763088][T14303] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:01:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e383"], 0xdd) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xfffffff0) 23:01:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x10000000000) 23:01:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:01:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x7ffffffff000) 23:01:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) exit(0x0) 23:01:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf0ff7f00000000) 23:01:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b"], 0x137) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 881.755864][T14325] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 881.788567][T14325] FAT-fs (loop4): Filesystem has been set read-only [ 881.795774][T14330] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:01:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf0ffffff7f0000) [ 881.822945][T14330] FAT-fs (loop5): Filesystem has been set read-only 23:01:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e383"], 0xdd) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:01:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x100000000000000) 23:02:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x200000000000000) [ 882.307362][T14372] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:02:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) finit_module(r1, &(0x7f0000000000)='selinuxsecurityGPLnodevselfvmnet0[/\x00', 0x2) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 882.400211][T14372] FAT-fs (loop5): Filesystem has been set read-only 23:02:00 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 882.493027][T14372] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:02:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x400000000000000) [ 882.553287][T14368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:02:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f"], 0xb9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) open(&(0x7f0000000000)='./file0\x00', 0x8400, 0x80) 23:02:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="413f4a9fe6fccc1d3bbde0544dbc23", 0xf}], 0x800, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) signalfd(r0, &(0x7f00000001c0), 0x8) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttynull\x00', 0x30082, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80000001, 0x305181) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x500000000000000) 23:02:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x5c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@loopback, r5}, 0x14) r6 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r6, r6, 0x0, 0x8080fffffffe) [ 882.841532][T14367] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 882.902126][T14367] FAT-fs (loop4): Filesystem has been set read-only 23:02:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x600000000000000) 23:02:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r6, r6, 0x0, 0x8080fffffffe) 23:02:00 executing program 0 (fault-call:6 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 883.097787][T14432] FAULT_INJECTION: forcing a failure. [ 883.097787][T14432] name failslab, interval 1, probability 0, space 0, times 0 [ 883.117228][T14432] CPU: 0 PID: 14432 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 883.125595][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.135658][T14432] Call Trace: [ 883.138959][T14432] dump_stack+0x1e9/0x30e [ 883.143466][T14432] should_fail+0x433/0x5b0 [ 883.147893][T14432] ? alloc_pipe_info+0xe4/0x470 [ 883.153362][T14432] should_failslab+0x5/0x20 [ 883.157880][T14432] kmem_cache_alloc_trace+0x57/0x300 [ 883.163174][T14432] alloc_pipe_info+0xe4/0x470 [ 883.167876][T14432] splice_direct_to_actor+0x95b/0xb40 [ 883.173271][T14432] ? do_splice_direct+0x340/0x340 [ 883.178302][T14432] ? lock_acquire+0x169/0x480 [ 883.182989][T14432] ? do_sendfile+0x7dd/0xfe0 [ 883.188117][T14432] ? fsnotify_perm+0x64/0x390 [ 883.192894][T14432] do_splice_direct+0x201/0x340 [ 883.197767][T14432] do_sendfile+0x809/0xfe0 [ 883.202214][T14432] __x64_sys_sendfile64+0xed/0x1a0 [ 883.207347][T14432] do_syscall_64+0xf3/0x1b0 [ 883.211875][T14432] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 883.217770][T14432] RIP: 0033:0x45c889 [ 883.221668][T14432] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:02:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xa00000000000000) [ 883.241281][T14432] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 883.249699][T14432] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 [ 883.257676][T14432] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 883.265658][T14432] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 883.273652][T14432] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 883.281719][T14432] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000000 23:02:01 executing program 1 (fault-call:7 fault-nth:0): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='vfat\x00', &(0x7f00000001c0)='/cpusetppp1\x00', &(0x7f0000000200)='vfat\x00'], &(0x7f0000000340)=[&(0x7f0000000280)='%\x00', &(0x7f0000000300)='\x00']) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) accept$ax25(r0, &(0x7f00000003c0)={{0x3, @default}, [@default, @bcast, @bcast, @default, @remote, @remote, @rose, @netrom]}, &(0x7f0000000180)=0x48) r1 = open(&(0x7f0000000380)='./file0\x00', 0xf29cc6f1d969a960, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 883.477792][T14446] FAULT_INJECTION: forcing a failure. [ 883.477792][T14446] name failslab, interval 1, probability 0, space 0, times 0 [ 883.517691][T14446] CPU: 1 PID: 14446 Comm: syz-executor.1 Not tainted 5.6.0-syzkaller #0 [ 883.526070][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.536133][T14446] Call Trace: [ 883.539447][T14446] dump_stack+0x1e9/0x30e [ 883.543803][T14446] should_fail+0x433/0x5b0 [ 883.548239][T14446] ? alloc_pipe_info+0xe4/0x470 [ 883.553106][T14446] should_failslab+0x5/0x20 [ 883.557627][T14446] kmem_cache_alloc_trace+0x57/0x300 [ 883.562938][T14446] alloc_pipe_info+0xe4/0x470 [ 883.567635][T14446] splice_direct_to_actor+0x95b/0xb40 [ 883.573088][T14446] ? rcu_lock_release+0x9/0x20 [ 883.577865][T14446] ? do_splice_direct+0x340/0x340 [ 883.582933][T14446] ? fsnotify_perm+0x64/0x390 [ 883.587624][T14446] do_splice_direct+0x201/0x340 [ 883.592493][T14446] ? security_file_permission+0x60/0xc0 [ 883.598051][T14446] do_sendfile+0x809/0xfe0 [ 883.602495][T14446] __x64_sys_sendfile64+0xed/0x1a0 [ 883.607625][T14446] do_syscall_64+0xf3/0x1b0 [ 883.612139][T14446] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 883.618032][T14446] RIP: 0033:0x45c889 [ 883.621926][T14446] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 883.641563][T14446] RSP: 002b:00007ff05c2f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 883.649982][T14446] RAX: ffffffffffffffda RBX: 00007ff05c2f56d4 RCX: 000000000045c889 [ 883.657965][T14446] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 883.665944][T14446] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 883.673924][T14446] R10: 00000000eefffdef R11: 0000000000000246 R12: 0000000000000007 [ 883.681904][T14446] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000000 [ 883.734756][T14403] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 883.759877][T14403] FAT-fs (loop5): Filesystem has been set read-only 23:02:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f"], 0xb9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc00000000000000) 23:02:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RXATTRWALK(r3, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x1}, 0xf) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) 23:02:01 executing program 1 (fault-call:7 fault-nth:1): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x80100, 0x11c) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0x0) write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x3, {0x0, 0x5}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000240)={0x5, 0xfffc, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_MANUFACTURER_CMD(r4, 0xc0104320, &(0x7f0000000200)={0xdc0, &(0x7f00000001c0)="7b7cbfb2"}) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 883.948971][T14463] FAULT_INJECTION: forcing a failure. [ 883.948971][T14463] name failslab, interval 1, probability 0, space 0, times 0 [ 883.996841][T14463] CPU: 0 PID: 14463 Comm: syz-executor.1 Not tainted 5.6.0-syzkaller #0 [ 884.007077][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.017133][T14463] Call Trace: [ 884.020424][T14463] dump_stack+0x1e9/0x30e [ 884.024870][T14463] should_fail+0x433/0x5b0 [ 884.029315][T14463] ? kcalloc+0x32/0x60 [ 884.033385][T14463] should_failslab+0x5/0x20 [ 884.037890][T14463] __kmalloc+0x74/0x330 [ 884.042054][T14463] ? kmem_cache_alloc_trace+0x24c/0x300 [ 884.047608][T14463] kcalloc+0x32/0x60 [ 884.051506][T14463] alloc_pipe_info+0x1fc/0x470 [ 884.056262][T14463] splice_direct_to_actor+0x95b/0xb40 [ 884.061783][T14463] ? retint_kernel+0x2b/0x2b [ 884.066772][T14463] ? do_splice_direct+0x340/0x340 [ 884.071795][T14463] ? do_splice_direct+0x1e5/0x340 [ 884.076806][T14463] ? do_splice_direct+0x340/0x340 [ 884.081818][T14463] do_splice_direct+0x201/0x340 [ 884.086701][T14463] ? security_file_permission+0x60/0xc0 [ 884.092235][T14463] do_sendfile+0x809/0xfe0 [ 884.096644][T14463] __x64_sys_sendfile64+0xed/0x1a0 [ 884.101738][T14463] do_syscall_64+0xf3/0x1b0 [ 884.106237][T14463] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 884.112117][T14463] RIP: 0033:0x45c889 [ 884.116202][T14463] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 884.135798][T14463] RSP: 002b:00007ff05c2f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:02:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:02 executing program 0 (fault-call:6 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf00000000000000) [ 884.144333][T14463] RAX: ffffffffffffffda RBX: 00007ff05c2f56d4 RCX: 000000000045c889 [ 884.152292][T14463] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 884.160246][T14463] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 884.168295][T14463] R10: 00000000eefffdef R11: 0000000000000246 R12: 0000000000000007 [ 884.176246][T14463] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000001 [ 884.226112][ T27] audit: type=1804 audit(1586473322.023:155): pid=14470 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1143/bus" dev="sda1" ino=16130 res=1 23:02:02 executing program 1 (fault-call:7 fault-nth:2): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 884.334020][T14475] FAULT_INJECTION: forcing a failure. [ 884.334020][T14475] name failslab, interval 1, probability 0, space 0, times 0 [ 884.435524][T14475] CPU: 0 PID: 14475 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 884.443914][T14475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.453981][T14475] Call Trace: [ 884.457299][T14475] dump_stack+0x1e9/0x30e [ 884.462015][T14475] should_fail+0x433/0x5b0 [ 884.466450][T14475] ? kcalloc+0x32/0x60 [ 884.470880][T14475] should_failslab+0x5/0x20 [ 884.475391][T14475] __kmalloc+0x74/0x330 [ 884.479577][T14475] ? kmem_cache_alloc_trace+0x24c/0x300 [ 884.485157][T14475] kcalloc+0x32/0x60 [ 884.486067][ T27] audit: type=1804 audit(1586473322.163:156): pid=14482 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1143/bus" dev="sda1" ino=16130 res=1 [ 884.489054][T14475] alloc_pipe_info+0x1fc/0x470 [ 884.489095][T14475] splice_direct_to_actor+0x95b/0xb40 [ 884.489114][T14475] ? do_splice_direct+0x340/0x340 [ 884.489126][T14475] ? lock_acquire+0x169/0x480 [ 884.489136][T14475] ? do_sendfile+0x7dd/0xfe0 23:02:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) ioctl$int_out(r0, 0x5460, &(0x7f0000000240)) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x4d8000, 0x4, 0x8000, r3, 0x0, &(0x7f0000000100)={0x9909e2, 0x527, [], @p_u32=&(0x7f0000000000)=0x80}}) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000200)={0x2, [0x7, 0xe88]}, 0x10) syz_mount_image$exfat(&(0x7f0000000280)='exfat\x00', &(0x7f0000000300)='./file0\x00', 0x7, 0x7, &(0x7f00000006c0)=[{&(0x7f00000003c0)="1434a3d7037e1abc28cc725b78adabf5f1f83261a80e4b4cb58b4288a3e50efea6bb739c7f7a77674a42a3765e9cefacafa50082ae9c788cbb4f6e85d769dd1670208ced385ff1bea334f6af86900648338d5021e890097411d3e31c0eaa136ee996a3d4ca763ba709e3d00626783b0dc2dcda198565db8fef4cb4b5147954cd5281283bc68523d548a51538ba989979129e47210711aa478ef5fd3ecd4088010a0eca8244955968e7a2b46055ba1e6745f545e921993979859996dd8487fc40c655d27a770b66b969e10bc9d677648ff5eda238cb66", 0xd6, 0x6}, {&(0x7f00000004c0)="5c5aac3c1ebf6406cf6eaeb73e63edf37eda31174d4ec5c427afc60a07f4ad8f11b93de654c916190e818bb2fffadf9fbac020c4afdd8bc55b4b4f497cdac3acccdab6a090d176fc20475b0bb4fe0d8ff50704035c8e865129e84c45d151629aa58ba23dc2e6388a41f958f09bcadbac9fe82a5d78639232c9285b45d55c79138bc103ace2fb6293fe83ac325ced22925632ced4af9138b971ce783f5543c5089d955510fdcd7faa43cc1163072faeeb", 0xb0, 0x81}, {&(0x7f0000000340)="d8fdd76ca60ef46955e8714790b88c7c2ec099d4f30708cb0de3d765b2d8ba3d8a894ebf", 0x24, 0xc96d}, {&(0x7f0000000580)="643586e2ad94a1f926525f98", 0xc, 0x6}, {&(0x7f00000005c0)="fb5cfa60ef91d4e386a9d00e", 0xc, 0x3}, {&(0x7f0000000600)="9ee5ed85b2d546da65526be2d7910b4b6ba9f7f92d5d32ed89fcb5612cf5dd44ae8cff9f5c0d2e227361bb8feb7139c70a4b58314b926a3932490aef955ae491f1e91de4bd8c47a9c5ab740a77c12ce40d50e73d6a173b2188d8b068ae240c6a184ddc39da2f311b59b6463267ec49c36fc3cc75fd5e015066104d865028b731d526bf80b3fbde44a370df4a393874e59007a054d989474c11b231d919bae3cba162f74944fa11807b1b23d08861d28c07", 0xb1, 0x6}, {&(0x7f00000008c0)="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", 0x1000, 0xfffffffffffffff8}], 0xa0055, &(0x7f0000000780)={[{@allow_utime={'allow_utime', 0x3d, 0x7}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@appraise_type='appraise_type=imasig'}, {@fsname={'fsname'}}]}) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r5, r5, 0x0, 0x8080fffffffe) ioctl$KDSETLED(r0, 0x4b32, 0x334) [ 884.489154][T14475] ? fsnotify_perm+0x64/0x390 [ 884.540477][T14475] do_splice_direct+0x201/0x340 [ 884.545347][T14475] do_sendfile+0x809/0xfe0 [ 884.549792][T14475] __x64_sys_sendfile64+0xed/0x1a0 [ 884.554914][T14475] do_syscall_64+0xf3/0x1b0 [ 884.559423][T14475] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 884.565322][T14475] RIP: 0033:0x45c889 [ 884.569235][T14475] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 884.591245][T14475] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 884.599922][T14475] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 [ 884.607903][T14475] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 884.615879][T14475] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 884.623902][T14475] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 884.632403][T14475] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000001 23:02:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x1000000000000000) [ 884.662874][T14485] FAULT_INJECTION: forcing a failure. [ 884.662874][T14485] name failslab, interval 1, probability 0, space 0, times 0 23:02:02 executing program 0 (fault-call:6 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 884.814705][T14485] CPU: 1 PID: 14485 Comm: syz-executor.1 Not tainted 5.6.0-syzkaller #0 [ 884.823093][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.833163][T14485] Call Trace: [ 884.836466][T14485] dump_stack+0x1e9/0x30e [ 884.840977][T14485] should_fail+0x433/0x5b0 [ 884.845871][T14485] should_failslab+0x5/0x20 [ 884.850377][T14485] kmem_cache_alloc_node_trace+0x69/0x2b0 [ 884.856188][T14485] ? __kasan_kmalloc+0x12c/0x160 [ 884.861230][T14485] ? __kmalloc_node+0x37/0x60 [ 884.865920][T14485] __kmalloc_node+0x37/0x60 [ 884.870507][T14485] kvmalloc_node+0x81/0x100 [ 884.875101][T14485] iov_iter_get_pages_alloc+0xbda/0x1170 [ 884.880753][T14485] default_file_splice_read+0x125/0xa40 [ 884.886473][T14485] ? memset+0x1f/0x40 [ 884.890524][T14485] ? fsnotify+0x12c3/0x1370 [ 884.895044][T14485] ? __ia32_sys_tee+0xa0/0xa0 [ 884.899732][T14485] splice_direct_to_actor+0x3c1/0xb40 [ 884.905219][T14485] ? do_splice_direct+0x340/0x340 [ 884.910255][T14485] do_splice_direct+0x201/0x340 [ 884.915112][T14485] ? security_file_permission+0x60/0xc0 [ 884.920657][T14485] do_sendfile+0x809/0xfe0 [ 884.925107][T14485] __x64_sys_sendfile64+0xed/0x1a0 [ 884.930518][T14485] do_syscall_64+0xf3/0x1b0 [ 884.934259][T14501] FAULT_INJECTION: forcing a failure. [ 884.934259][T14501] name failslab, interval 1, probability 0, space 0, times 0 [ 884.935029][T14485] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 884.953588][T14485] RIP: 0033:0x45c889 [ 884.957481][T14485] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 884.977173][T14485] RSP: 002b:00007ff05c2f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 884.985593][T14485] RAX: ffffffffffffffda RBX: 00007ff05c2f56d4 RCX: 000000000045c889 [ 884.993571][T14485] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000003 [ 885.001779][T14485] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 885.009755][T14485] R10: 00000000eefffdef R11: 0000000000000246 R12: 0000000000000007 [ 885.017722][T14485] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000002 [ 885.028885][T14501] CPU: 0 PID: 14501 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 885.037275][T14501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.047339][T14501] Call Trace: [ 885.050638][T14501] dump_stack+0x1e9/0x30e [ 885.054983][T14501] should_fail+0x433/0x5b0 [ 885.059422][T14501] ? kmalloc_array+0x2d/0x50 23:02:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f"], 0xb9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 885.064123][T14501] should_failslab+0x5/0x20 [ 885.068632][T14501] __kmalloc+0x74/0x330 [ 885.072801][T14501] kmalloc_array+0x2d/0x50 [ 885.077233][T14501] iter_file_splice_write+0x199/0xe20 [ 885.082618][T14501] ? touch_atime+0x105/0x2a0 [ 885.087243][T14501] ? generic_file_splice_read+0x4d1/0x700 [ 885.093510][T14501] splice_direct_to_actor+0x482/0xb40 [ 885.098987][T14501] ? do_splice_direct+0x340/0x340 [ 885.104031][T14501] do_splice_direct+0x201/0x340 [ 885.111339][T14501] do_sendfile+0x809/0xfe0 [ 885.115789][T14501] __x64_sys_sendfile64+0xed/0x1a0 [ 885.121270][T14501] do_syscall_64+0xf3/0x1b0 [ 885.125788][T14501] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 885.131702][T14501] RIP: 0033:0x45c889 [ 885.135696][T14501] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 885.155317][T14501] RSP: 002b:00007fa732beac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 885.164025][T14501] RAX: ffffffffffffffda RBX: 00007fa732beb6d4 RCX: 000000000045c889 [ 885.172016][T14501] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 885.179996][T14501] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 885.188070][T14501] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 885.196290][T14501] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000002 23:02:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x3f00000000000000) 23:02:03 executing program 0 (fault-call:6 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:03 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 885.444226][T14520] FAULT_INJECTION: forcing a failure. [ 885.444226][T14520] name failslab, interval 1, probability 0, space 0, times 0 [ 885.463400][T14520] CPU: 0 PID: 14520 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 885.471761][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.481825][T14520] Call Trace: [ 885.485131][T14520] dump_stack+0x1e9/0x30e [ 885.489477][T14520] should_fail+0x433/0x5b0 [ 885.493879][T14520] ? kmalloc_array+0x2d/0x50 [ 885.498452][T14520] should_failslab+0x5/0x20 [ 885.504780][T14520] __kmalloc+0x74/0x330 [ 885.508920][T14520] kmalloc_array+0x2d/0x50 [ 885.513328][T14520] iter_file_splice_write+0x199/0xe20 [ 885.518731][T14520] ? touch_atime+0x105/0x2a0 [ 885.523341][T14520] ? generic_file_splice_read+0x4d1/0x700 [ 885.529074][T14520] splice_direct_to_actor+0x482/0xb40 [ 885.534454][T14520] ? do_splice_direct+0x340/0x340 [ 885.539470][T14520] do_splice_direct+0x201/0x340 [ 885.544671][T14520] do_sendfile+0x809/0xfe0 [ 885.549080][T14520] __x64_sys_sendfile64+0xed/0x1a0 [ 885.554201][T14520] do_syscall_64+0xf3/0x1b0 [ 885.558688][T14520] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 885.564573][T14520] RIP: 0033:0x45c889 [ 885.568446][T14520] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 885.588489][T14520] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 885.596902][T14520] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 [ 885.604854][T14520] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 885.612806][T14520] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 885.620754][T14520] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 885.628794][T14520] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000003 23:02:03 executing program 0 (fault-call:6 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x143000, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r4, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="ba0f6dd2a6636f899006152e2b0893535df3a896ef19ef4f86d0ff053a59e8", @ANYPTR], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR, @ANYBLOB="702ad551f37c0a1e460651813d3e73d92a1e1318074f3ec6f3134c07a18dc6d74783a08a50ebaa104aacc0b9221140e6d08f01d8215b03", @ANYPTR, @ANYRES64=r1, @ANYRES16, @ANYRES64=r3, @ANYRESHEX=r4, @ANYRES64, @ANYRESDEC], @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESOCT], @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT], 0x62) sendfile(r1, r1, 0x0, 0x8080fffffffe) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r5, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) accept$nfc_llcp(r5, &(0x7f00000001c0), &(0x7f0000000000)=0x60) [ 885.786240][T14533] FAULT_INJECTION: forcing a failure. [ 885.786240][T14533] name failslab, interval 1, probability 0, space 0, times 0 [ 885.801389][T14533] CPU: 1 PID: 14533 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 885.809769][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.821343][T14533] Call Trace: [ 885.824631][T14533] dump_stack+0x1e9/0x30e [ 885.828954][T14533] should_fail+0x433/0x5b0 [ 885.833364][T14533] ? kmalloc_array+0x2d/0x50 [ 885.837936][T14533] should_failslab+0x5/0x20 [ 885.842428][T14533] __kmalloc+0x74/0x330 [ 885.846571][T14533] kmalloc_array+0x2d/0x50 [ 885.850978][T14533] iter_file_splice_write+0x199/0xe20 [ 885.856331][T14533] ? touch_atime+0x105/0x2a0 [ 885.861088][T14533] ? generic_file_splice_read+0x4d1/0x700 [ 885.866810][T14533] splice_direct_to_actor+0x482/0xb40 [ 885.872203][T14533] ? do_splice_direct+0x340/0x340 [ 885.877214][T14533] do_splice_direct+0x201/0x340 [ 885.882065][T14533] do_sendfile+0x809/0xfe0 [ 885.886497][T14533] __x64_sys_sendfile64+0xed/0x1a0 [ 885.891589][T14533] do_syscall_64+0xf3/0x1b0 [ 885.896072][T14533] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 885.901948][T14533] RIP: 0033:0x45c889 [ 885.905945][T14533] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 885.925541][T14533] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 23:02:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x4000000000000000) [ 885.933952][T14533] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 [ 885.942209][T14533] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 885.950195][T14533] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 885.958499][T14533] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 885.966990][T14533] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000004 [ 886.020542][T14526] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 886.029445][T14526] FAT-fs (loop4): Filesystem has been set read-only 23:02:03 executing program 0 (fault-call:6 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 886.090239][T14526] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 886.099788][T14526] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 886.110231][T14526] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 886.121171][T14526] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 886.131735][T14517] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 886.131866][T14543] FAULT_INJECTION: forcing a failure. [ 886.131866][T14543] name failslab, interval 1, probability 0, space 0, times 0 [ 886.159898][T14543] CPU: 1 PID: 14543 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 886.164393][T14511] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 886.168646][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.168652][T14543] Call Trace: [ 886.168673][T14543] dump_stack+0x1e9/0x30e [ 886.168691][T14543] should_fail+0x433/0x5b0 [ 886.168711][T14543] ? kmalloc_array+0x2d/0x50 [ 886.168727][T14543] should_failslab+0x5/0x20 [ 886.208998][T14543] __kmalloc+0x74/0x330 [ 886.213168][T14543] kmalloc_array+0x2d/0x50 [ 886.217582][T14543] iter_file_splice_write+0x199/0xe20 [ 886.223297][T14543] ? touch_atime+0x105/0x2a0 [ 886.227904][T14543] ? generic_file_splice_read+0x4d1/0x700 [ 886.233732][T14543] splice_direct_to_actor+0x482/0xb40 [ 886.239111][T14543] ? do_splice_direct+0x340/0x340 [ 886.244175][T14543] do_splice_direct+0x201/0x340 [ 886.249024][T14543] do_sendfile+0x809/0xfe0 [ 886.253438][T14543] __x64_sys_sendfile64+0xed/0x1a0 [ 886.258588][T14543] do_syscall_64+0xf3/0x1b0 [ 886.263126][T14543] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 886.269144][T14543] RIP: 0033:0x45c889 [ 886.273044][T14543] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 886.292643][T14543] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 886.301052][T14543] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 [ 886.309037][T14543] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 886.316992][T14543] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 886.324949][T14543] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 886.333248][T14543] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000005 23:02:04 executing program 0 (fault-call:6 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x6000000000000000) [ 886.398451][T14511] FAT-fs (loop5): Filesystem has been set read-only [ 886.429296][T14550] FAULT_INJECTION: forcing a failure. [ 886.429296][T14550] name failslab, interval 1, probability 0, space 0, times 0 [ 886.443197][T14550] CPU: 0 PID: 14550 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 886.451540][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.461611][T14550] Call Trace: [ 886.468178][T14550] dump_stack+0x1e9/0x30e [ 886.475081][T14550] should_fail+0x433/0x5b0 [ 886.479532][T14550] ? kmalloc_array+0x2d/0x50 [ 886.484427][T14550] should_failslab+0x5/0x20 [ 886.489899][T14550] __kmalloc+0x74/0x330 [ 886.494114][T14550] kmalloc_array+0x2d/0x50 [ 886.500036][T14550] iter_file_splice_write+0x199/0xe20 [ 886.509791][T14550] ? touch_atime+0x105/0x2a0 [ 886.514400][T14550] ? generic_file_splice_read+0x4d1/0x700 [ 886.520236][T14550] splice_direct_to_actor+0x482/0xb40 [ 886.525722][T14550] ? do_splice_direct+0x340/0x340 [ 886.531537][T14550] do_splice_direct+0x201/0x340 [ 886.536690][T14550] do_sendfile+0x809/0xfe0 [ 886.541401][T14550] __x64_sys_sendfile64+0xed/0x1a0 [ 886.546551][T14550] do_syscall_64+0xf3/0x1b0 [ 886.551079][T14550] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 886.556987][T14550] RIP: 0033:0x45c889 [ 886.560885][T14550] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 886.581322][T14550] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 886.590105][T14550] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 23:02:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c"], 0xcb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:04 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18002, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 886.598283][T14550] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 886.607136][T14550] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 886.616263][T14550] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 886.624422][T14550] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000006 23:02:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x6558000000000000) 23:02:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB='\t'], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:04 executing program 0 (fault-call:6 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 887.059538][T14579] FAULT_INJECTION: forcing a failure. [ 887.059538][T14579] name failslab, interval 1, probability 0, space 0, times 0 23:02:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ntfs(&(0x7f0000000300)='ntfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='nls=iso8859-4', @ANYBLOB=',show_sys_files=no']) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r1, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "223c794b9cd313592299f620c4d806ae47310d"}, 0x14, 0x3) fchdir(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 887.154855][T14579] CPU: 1 PID: 14579 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 887.163263][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.173372][T14579] Call Trace: [ 887.176673][T14579] dump_stack+0x1e9/0x30e [ 887.181026][T14579] should_fail+0x433/0x5b0 [ 887.186132][T14579] ? kmalloc_array+0x2d/0x50 [ 887.190820][T14579] should_failslab+0x5/0x20 [ 887.195652][T14579] __kmalloc+0x74/0x330 [ 887.200725][T14579] kmalloc_array+0x2d/0x50 [ 887.205160][T14579] iter_file_splice_write+0x199/0xe20 [ 887.210653][T14579] ? touch_atime+0x105/0x2a0 [ 887.216411][T14579] ? generic_file_splice_read+0x4d1/0x700 [ 887.222160][T14579] splice_direct_to_actor+0x482/0xb40 [ 887.227571][T14579] ? do_splice_direct+0x340/0x340 [ 887.232610][T14579] do_splice_direct+0x201/0x340 [ 887.237489][T14579] do_sendfile+0x809/0xfe0 [ 887.242059][T14579] __x64_sys_sendfile64+0xed/0x1a0 [ 887.247186][T14579] do_syscall_64+0xf3/0x1b0 [ 887.252321][T14579] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 887.258221][T14579] RIP: 0033:0x45c889 [ 887.262123][T14579] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 887.281953][T14579] RSP: 002b:00007fa732c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 887.290375][T14579] RAX: ffffffffffffffda RBX: 00007fa732c0c6d4 RCX: 000000000045c889 23:02:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x8100000000000000) [ 887.298353][T14579] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 887.306504][T14579] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 887.314483][T14579] R10: 00008080fffffffe R11: 0000000000000246 R12: 0000000000000004 [ 887.322549][T14579] R13: 00000000000008d4 R14: 00000000004cb7c6 R15: 0000000000000007 [ 887.595551][T14567] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:02:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x8847000000000000) 23:02:05 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18003, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c"], 0xcb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 887.648119][T14567] FAT-fs (loop4): Filesystem has been set read-only 23:02:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x8848000000000000) [ 888.078799][T14614] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:02:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x88a8ffff00000000) 23:02:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x10000, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r1, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x1, '!'}, &(0x7f0000000000)=0x3e2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r3, 0x6, 0x7, 0x7f, 0x3, 0x1ff}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r4, &(0x7f0000000280)='\x00', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x3, 0x6}) [ 888.208019][T14614] FAT-fs (loop4): Filesystem has been set read-only [ 888.232207][T14614] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:02:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 888.262257][T14608] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:02:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x9effffff00000000) 23:02:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c"], 0xcb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc000000000000000) 23:02:06 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18004, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc00e000000000000) 23:02:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xc40d000000000000) 23:02:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xe03f030000000000) 23:02:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x13, 0x0, &(0x7f0000000480)="9baeea8a4bf11c321eb5da988d28116b8d13a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x7, 0xe6b8, 0x1}, &(0x7f0000000300)=0x100000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x4a83}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r4, r1, 0x0, 0x5, &(0x7f0000000000)='vfat\x00', r6}, 0x30) ioctl$KDDELIO(r0, 0x4b35, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xeffdffff00000000) 23:02:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000000)) 23:02:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xeffdffffffffffff) 23:02:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c"], 0xd4) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 889.537592][T14655] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 889.546409][T14655] FAT-fs (loop5): Filesystem has been set read-only 23:02:07 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18010, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xefffffff00000000) 23:02:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3385aced"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) write(r2, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f00000001c0)=0x20) 23:02:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x4, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:07 executing program 3: socket$inet6(0xa, 0x804, 0x80) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x244802, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x701800, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x7ff, 0x2, 0x3, 0x1}, 'syz0\x00', 0x3f}) fchdir(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) 23:02:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xf0ffffff00000000) 23:02:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xffffffff00000000) 23:02:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="a085cfe730a19ad8d9a191219b5f2e37fd4bba24ad07f209c10b02cf263fab"], 0x1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10080, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x3f, 0x0, 0x34c3b880, 0x7]}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0xfffffffffffffdef) 23:02:08 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400100, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30a, 0x1, 0x40, 0x0, 0xff}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x600000, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0xa0}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000280)=[{0xfffb, 0x0, 0x0, 0xfffff010}, {0x80000006}, {0x40, 0x1, 0x8, 0x400}, {0x8, 0x0, 0x1, 0xff}, {0x0, 0x9, 0x0, 0x20}, {0x5, 0x2, 0x40, 0x4}]}, 0x10) r2 = socket(0x10, 0x3, 0x0) write$nbd(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 890.549266][T14707] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 890.559417][T14707] FAT-fs (loop5): Filesystem has been set read-only 23:02:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c"], 0xd4) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = msgget$private(0x0, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r1, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r2 = syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r5 = syz_open_procfs(r4, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r6, 0x0, r3, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="2734e01a30ae9710ce7fef2a074578ea261f511216a3e9960b7bdb8bda7a01142cf220ad895d1f6a68c10235e8b0f746fa9f39863a80cc6b80fa2c5b460de14a087e00ceb5db31d9c9a9bf7fb3b680d1ca7c2ba3aa3ce2af57e4ea18a135ebd57ebe2467364eaa5d4842f2ea991ce06423f0f7401a7f1993a8c1cc0da3228c051e7b7a34bcc0b1ca463a544a7530804ef9c64f4a0864224fd63503f85098a7c6ce3f200dbbf18d25e1117c1bc00f4b17c2de5e02e1347f6a750dbe89cc9169a8d831372aa1", 0xc5, 0x7}, {&(0x7f0000000300)="bbee1e6153601954f0b635e8ef4d733647b4e07c84416d679fb27133357b5d1793ee99d80613d8a63ff426cc2250940b69aea76cca", 0x35, 0x9}], 0x44001, &(0x7f0000000380)={[{@type={'type', 0x3d, "471fb930"}}, {@session={'session', 0x3d, 0xfff}}, {@gid={'gid', 0x3d, r3}}], [{@hash='hash'}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, 'vboxnet1[]^'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}) r7 = open(&(0x7f0000000180)='./file0\x00', 0x464082, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r8, r8, 0x0, 0x8080fffffffe) 23:02:08 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c80) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r5 = socket(0x10, 0x3, 0x0) write$nbd(r5, 0x0, 0x0) 23:02:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xd, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x18, 0x2, 0x6) getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$nbd(r1, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x400c01) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) connect$bt_sco(r1, &(0x7f0000000080), 0x8) 23:02:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r1, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) accept4(r0, &(0x7f0000000300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80, 0x80800) bind$packet(r1, &(0x7f0000000280)={0x11, 0x11, r2, 0x1, 0x7}, 0x14) clock_nanosleep(0x4, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000100)) fchdir(r0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000200)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x837c, 0x4) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="a02ede59"], 0x1) sendfile(r3, r3, 0x0, 0x8080fffffffe) 23:02:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'veth0_to_bond\x00', 0x3}) 23:02:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x20100) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x408c0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)={0x4, 0x5, 0x4, 0x4000, 0x4, {}, {0x4, 0x1, 0xff, 0xff, 0x9, 0x18, "6a722abb"}, 0x9, 0x9f0fd421d5e4cc3a, @offset=0x8, 0xfff, 0x0, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000200)) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="ba"], 0x1) sendfile(r6, r6, 0x0, 0x8080fffffffe) 23:02:09 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x58c82, 0x56f511d1a6aa1029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x10}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0xfffc, @rand_addr=0x7}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, r4, 0x0) ioprio_set$uid(0x3, r4, 0x2) [ 891.551013][T14804] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 891.575334][T14804] FAT-fs (loop4): Filesystem has been set read-only [ 891.585722][T14770] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 891.594150][T14770] FAT-fs (loop5): Filesystem has been set read-only 23:02:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c"], 0xd4) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x10, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 891.917156][T14818] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 891.928080][T14818] FAT-fs (loop4): Filesystem has been set read-only 23:02:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1c, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) 23:02:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2a, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x4, 0x7, 0x81, r3, 0x0, &(0x7f0000000040)={0x980903, 0x671, [], @p_u16=&(0x7f0000000000)=0x1}}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r4, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400840, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r5, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) write$nbd(r5, 0x0, 0xe8e0119f6b6256d3) 23:02:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a09609d4a7d2b837c63341c246ec19d9d33d429102f458e59f1b3ea5fdc5ef00eea52467369b62d29b8bdf69a5d65c23aa999516d4bac9d6c25f9d85c4e270ed97788d15abff938ba72cc6b5cf612c1a7922994512ff2af76c57e577ca082f8af7de177ac31c5fbba1e69575babf115af9a3d507ca9adcc099a387d958824f8b6ba6c7a6452a9fbd2e57939d85166a0000a8289555381200790b97a62eaa2e1faaf173d494dd247cb8bec7fc46bed834c7f5dbc9a421d6ee588f99ae38fe8a43ca198af2b4f1b2b41596de7f2b294d01524e78eaa1481c2d0e47b8f7c1474696"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 892.390816][T14813] vivid-002: kernel_thread() failed 23:02:10 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x680501, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000080)=0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r5, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000140)={0x3, @null, r5}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 23:02:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x38, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f448"], 0xd9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) r1 = open(&(0x7f0000000280)='./file0\x00', 0x17e, 0x42) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="03", 0x1, r2) r3 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='vfat\x00', r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r3, 0x1000, 0xd9}, 0x0, &(0x7f00000003c0)="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", &(0x7f00000013c0)="563ca21511f6eaa034e3b890edecf8d66b8d25594f09f87dc97f18cc499e70543ddd5c6abc608cc60436553ff5bac6826cc2a6350623979686d4a07e42678b5b6d61f8f6198aff36a89cd9712ed6e51de8238094f5701f78ac78ec3fea92a73e7486d02e5c604358d51df30fcda8fba9c7241a3e58aa76e4742d68f4341adc23097bea2cf63c43562cf284138f274bbfbfdb65022253586b4e7181494b718b431abfce10b4541744fd5fee6a1ccb412fcd44422842cc27708bdd6973f48495df68e3c3cd19881d8bb8d9be49cd3374f59d31bc6f76d729cde2") write$binfmt_aout(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="cb4c0e8681036d6b0d2c7ad8b5a125568f556205c56d995e4e76b34a1cd56dcefa7659b2a51c157272fd29c1e9d617ed66c2c3e0f813659724e951a62ded99156a0e1bec978eca1ded7d4390873c3ced99a2b1388eadf58c0d84959fdda24a9087369cb61c259d1a713a30b419903bb476467b2e41a7395c36798fb8a8920c00004aed37b8680d62c4b6754cc24902356af012c247fd133450ecc59ce4135a5cc9973e15291bc30f6ad51d36696d708c"], 0xb0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 892.661882][ T27] audit: type=1804 audit(1586473330.453:157): pid=14879 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1159/file0" dev="sda1" ino=16381 res=1 23:02:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x46, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x2280, 0xa7) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="f5900f297ac3fbbd907cd7a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x54, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x27, 0x1, 0x2, 0xb, 0x7f, 0x2, "8dbf515032c8164d6f5aa408593a371037e1bc4b8bb9f81ea45617886dc1506e2e326f85ad73c8e11980a82e8d11009e86de229edb0674b24d8a4c0361360a", 0x2}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="93b4ea2ae1d53c85b5d2b75e36d4df47a4e398d9d0eafa9cd83b1fca4df546cdf53131c9c96de9fe3a47920e2df503822a26506998cd03cb59a94d6cdf6d5e0532666c4da37c3e63dde9e6b95641c1c0b669d57f40184d02b83ef16ebed03078969ef95273919503f3137f25db474daa347fdced187d0e61af361e4a652d02d76f825520ea3c4a0898c2083b6bd84d1ea5caa723cd31668961a0c7f74612fd24f446b3206920cbfdeb1abb5e8bbe50f5ecb2df68d215f6c72207cd249093453fe52687e6607c88bd683c1c7063d82facf8e74893ab12c217348aa4bfa9e7709c", 0xe0}, {&(0x7f0000000400)="0412b6f92033d305c488ed05775a6b61e9c705ff02e811239370d1222262ebc3231a2a30bed85d0ab080c1d885441d9682f8959bf922144aba6b154aad42d6ee744c371e33fae0cc1a020ac1ff2feb791ab6736e889d29b844adc54c170855e7724fa6c0925cb7feb8bad7887ca6ee6fdd62438cea815274f5c340146371192ac7bd61da862822d5cc56b5e9e8525f40afa0d1f25b25298b029fd15d78b4ac5f2bcff49b468710f15a93dfe8f8677eabcfe3e5f9db846f574a9a588d55b9db56bbb447c626041a2805e86318a191203f914898e90485925be09f8f4c0feb5b0a2863c76ba22d81", 0xe7}], 0x2, 0x0, 0x0, 0x40000}, 0x40015) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 892.953457][T14893] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 892.974418][T14893] FAT-fs (loop4): Filesystem has been set read-only 23:02:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)=0x48) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) 23:02:11 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) write$char_usb(0xffffffffffffffff, &(0x7f0000002580)="39b0049c34e4410f38acc830e712ef66ba0ac3a1021e0d7b3d03f1d511cdbab96e86abe51f17cae2e35d47036341459c6dee07fb3c6a15df6368cf5a826278", 0x3f) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002865270d0000000000f40d65c570c9a2", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000a00010072737670360000002c0002001400030000000000000000000000ffff0000000014000200fe880000000000000000000000000001"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@getsa={0x236c, 0x12, 0x800, 0x70bd28, 0x25dfdbff, {@in=@remote, 0x4d2, 0x2, 0x1c}, [@migrate={0x180, 0x11, [{@in=@multicast1, @in6=@mcast1, @in6=@mcast2, @in=@multicast2, 0x33, 0x2, 0x0, 0x3507, 0x2, 0x2}, {@in=@broadcast, @in6=@mcast2, @in=@empty, @in=@multicast1, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x33, 0x4, 0x0, 0x3500, 0xa, 0x2}, {@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x10}, @in=@empty, 0x33, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in=@broadcast, @in=@multicast2, @in6=@mcast2, @in6=@remote, 0x32, 0x0, 0x0, 0x3507, 0x2, 0x2}]}, @coaddr={0x14, 0xe, @in=@rand_addr=0x5}, @algo_aead={0xd8, 0x12, {{'aegis128l\x00'}, 0x460, 0xa0, "285df66b839290734caec366bce61fd46f4a67df3810f2656d560d0a2cffb2d760eaa103a4c71dc5076e437a73da5d5378d238ffb2f18de40f62b534c1b20d1380519378898f5548c0a803ab4b287b960038c7933e9577315d56ff278249e44608e27bddc961a3de37c45cd0fa2175427adc4cc99171f16cf94f51da53986452a97c51010cef648f00b81d46"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3ff}, @algo_auth_trunc={0x104c, 0x14, {{'sha3-224\x00'}, 0x8000, 0x0, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in=@rand_addr=0x9ba, 0x0, 0x2}}, @replay_thresh={0x8, 0xb, 0x5}, @algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "2cf0b424d1e5d573b91011a795645d2050d8279b39772924d7e2b3d0a164c695075b9bfddb9e75708bcab52f6ffe2c275e223384235eff4647495fc9fefc34f6cbf3e85d3338bbdf9a72b476fe2354ac35027e7250811d33f4ae361870652e399f322f50760fd00f6815c8a1ecb8759f2b79a20efc448f83dbbe2e41f38ac9c94bd3d662ae3bc24224b96930fb4c6ffc6a9eb6c4ce0a55383278fe2614aa027765899c34859a15e64abc8ac664b3230c8db9f57bf999cf7c211e0b7614c775d55dfa342bf1736c091f8ee276a2d2941ed673c19411b17f30e76ddd993abc5b76c81ffeb952f960e936f62b3052af92946b3a40afdc081259d51acf917a9094d0c72670b5925c52d229b53f1c8474b0a8510d305c9159964fc2a9537e770ce8e5c5d27f73bd668acb40cfe24e20edee9840470143cf383cba3a105c8799954008db1ff3d7c8e034c34a91a2db70327d698a7fcd1f6acb9c1b1676daaa0450412fcbcb0a4cbef94deb6f4a2608285cc7c3efd06308b32119610221bccc107f09bba38e8108c0834885c27078048258fe4a340c2214b846e4cd6d68b8dc3c829de6e84b19406de45fc53fc62f3114debeddaf32cd3b2a9ad367de7243340737433602ad0784001acea2649ef422e4cb8a62ddc21e7bfa4bb97cf16b8df7f94abd06e308e6688300477123ea782c43bc1475c1a65e16eb2d76087babffd5e00ed30b7cf8749efc8dd9f9b1508da2dbb84bd308dc26a54307e067d3f5af7f9ed77635f609ed818b06f8e73437e727ec7e01e9df58a4c79a2f249cbbebed0931887c77e350e778adf5bbc5e8978b243b068ad4fd14ff6e61ab7c4ca9633e7262286eaa5a3fa39e043f3f562b281e700f62719107f26743c4e81e25cd231bc86deef2cf1e8ace3fa62991a42cb7502ccb3ca768ded612a567c0ca8fcf21397601b74eca3e1c69554c74267f4022dfb6ff912ed3e967bd6ac28a17537375dea09742185e10df83434afba93b7ca6142fec7cd66fb0a5bc04c8909da96192dfe8adae95d635b425cdb7bc8edd355b9c8943694728a499ccb473d9397ae921108dd745337aff5edae3b00014c0c505716388041b60c472736d38cc0afb17bdc7a169508ea8cd3d081719af10fff5b56b525233f64da8b79dfe330b37df5411d022e347f4ca08de12f7c1fa195b92e61b40b9c41de8b22400c481c04e90e0b82905b5cfd752fb6ec991cab37da502e880c3e612d1bfb88a9b34f89b8f01ff7ea7957cf7473764866625a94fb45ef4b0713cb55b87331720ce9e78e2e4cbb5883eeac10b458288d2aedb859c84142171fdaaa97f20d9490b3cd421e98f3cf51acde40740c0f99ef3b37c630f76879e9a7d07fd5e06082f73e73765645cac5c397324aff6387afd32ad7d8811156019da976240acf8cae358c8de139c8afc46ee37d90be14f3074beda3999d29f78401953256c9623e3adcc9a057e8367f233083a799bcc3b1d0eccf67488066e6f990cdfab6df4b36c6becb80263d22b026b83ad659c1039d9558f2021ff7a7c5acacd3e13def8bcb67167f4fd253802950692bbfc4f8ccf9ae026c3fc525ab900e16d5a04be00a2e02f21140c99aa1a519ab1681f9a5c48c8c9a50c273af082c339e7a593147ee02790084e0055ceeb6f4ae2baa3c432d36a83ff997c9333a8cd6340ac7af14be0439687400f8702e82d7860e35fd318297b18ecaa4114603fba64148add4678d2c8ec06377865823444abba62ebf5ef2e2493fdb38e60f6088863ad653f61565e165110d7153e52a0e482535198198e7637e74cad1552391bca1e25a4366b39b4399732289cc4b12612ee1fbaea6885f433c33010e40027bfe499483726f6723cebc3cbd0bf0426b0d00279f48d5903cae92090b970bff1b0615d070cf0cfe339dd72224493fa38f4667cdb5b16591272bb154b4aa5fe39f9c79b78f644006aed940c5493fbc85d56d1bda80fc4554da9701d37382dbba9aa0f070603ba5290a9f18066a43f3271d0d7d5090989da0949e906a2000ffa6e297e5665237368e21a858e83c31a3ce2c488868c466149c89edbb15f190bc305a7ea16f823ca72a4d8e106b320a2dca3623f390baa07d48eb0364e522be1c71ae029f41df618467c224545619c2b7045c2bd10a297264ba6d8e6e9ffeb5db1c267c2567ffdfa183a68c0422321cfffe17610e4ec09ac772c33532d4aaf8cab3a38c5ad6c26b7496e8d23a7aa6775485cd41c1d0d6de61c2eec3a1d704958d01a86caaa99db353952cdae41e96ecd0c49edf64f94e017d21e13ad9c4d5cdd6699b13580cf00c8ac7cf51f88af51c828662c2cd0d5f191103b88fc6003c81c0237ccefde9d547db808b9145cd63a9b00e7ac1593b46ca0cb8b69ff81a087a3b9afcc9ba5141de88297c0ba50fba02547fd043011116172ff387cfbab517f1575f6e2a5f6e1910461eca9cdfcc56cb2b6dd56419c7e17bd26bb6da18712da5b935f679b27df9fbe85b5b6403f9c5280afb38a2b0baec0bb4a19e7a644dedd2f5e191226febd1c88712be96e6e290f725f9af0df223adfd11341b581aded65352f3f9cdb256fc94f254af41f5964c3140ee07fe47f10571ca7779220215a39c86b51e537c9824dce3d7b453d4af58687aa71ff081dfb32f4c4b089b4faeffec10727130c1cf4cb4b518658abdfc4e9208f8dac9f543aba684da1b0b950989451f0e74ac67507fbe7034d264bc730c3cd42b208ce68d22bae8083f1d9a51646f98db048091d9fa53b840469dc21c53482dcae154876002a77faf553d5069ba09f5e40c59fa8075662ddedcc894f3f4d4872cbc8a04e06a5e6520b5cc60435f3285c60ed5e48a0396a4ed0aced072b520dcd63363da5316879c7cf9fbce23fac4defd932e0902e22299d659f762907f9191222a199b2441e665110079bce8834d278068506d845045175eb23bc34ce9042d8927fd5e6cf769eded581427285468a2eef09730176289d99c9bdd882bd85a90d2e0ff6da61a9987515622e3d36523849123356871bf64a2e2c70ccd81cbefea37d38f7f925a0437784d985f68e50955bc7535a0b7bf203d6dbc45763b70dddaec40468d4e2ee1816f08744bc108894e7c87db267430764004e3133c214e453427aa7979efeb7775998b105297da39a1c8de4961876c8d7f4f015db855764c9058a6d95749998679d66e92d8d185b507f3ebba63ea2835eee0b20b99d3ed1f30f09768013b44104f5b8cf2e8e8fce0cbc9afedc51c219eb118789efb78364f44bf30943f2f2a1226119614bc8a91d6f10f4c8987a44498052fbdd04613a3beab0ce482185f0032b0de38caace0f2923a13f2da6b5858efc549415c1dfc505f53eb81a1422c13173b7806f02b75fede4c320540db3f6ea1bc45f84d0584ca9b1d23af2569067ec098ce3ad1eb93d51ee3d3f595d67c375c68e6ca433e9b9a35f75daacd26a6297997b69fce6b19c7f792f93fccdeb21b12b935c2dd13943983306e6d19bae9a37cb1589022c22c1d6eb7a5687c48c6a4a08feb24391ca139d3228c82c39d0d2df1678a4a965731aa854b15051e29d70819cb4c4b1b05d50e59d03870c2479695004e1e0e5c5cfe3385ea458139420b8efc5085e94f0f4c212abbad2e275dc7c3914e0645d8f8b5822c3341192b14a48547e0f2ea2b18a15f18f3bd895169e1f2a9b8baec1e1395463974b9d2d90c2bf5a51fbbad094d5201df787d87cd2d71eff55cbf350f8008b13f5cf7099ab4344ebced957f7990ab179ff0664b90752d15d3b2bcbfa53598c1e21b85741ca9b95b862f5afa0e2ec497f2980bc153f2ddd61539b0faf17b82f44d24e7e4dad499300306338427ea336468da73f8ad62e94b92741f58b6b088b7be2453a3c59b6a4e466f88556db48e1c07969b34e80ea2dadc28dd83739201ba8f9fa7b2337b4c2d5b5f13dfb0d1d80f85619b5b825c58b88988c3b096ec1e6e5cd66803a746881ce51531313a7dab4377ad94cf0b192d730495eba64be6d975d2e389f68fbeba4532d04f53fe3e7ef21274ea2a7074be3aff2e4f85b30c9e66571cef67ed3b9227d19a7ab685f200b4872a1c21e404403c35009cbe85e23a42dd99186b4ce94f00910dd55e3087b65805ee9d8b38b9de4664ce73aa2bf43272089f4cffd334b9c52af3608cf5c8e9477cef00179c7bb9ec0c54681596ef2166d2169ae63cac5bbdab5e8b1d08edcbe25828b6992706f7a07b8b1d33bf9dd901b09adfc4d3dcd18af7e87c6c6e3b8b13d4d1c3790cdc0a3ae704aa5a40f1899cffdb8c211b5445ff33c2e310b20f2c37a1dd3a64e8e9a4b5c511fed23adaa9cf927ea1582a44677b71cf4ba0d42b15919ebb4381be80fa04de3da553f3669b09fb2d161107c1cdcdf2efba14b2ed10bca85f765d838cdcbbacbd2ae5ab2fd8f44d3779f854477cc8063b796a9b981af8468f9db1bf73d0a275ff98c7137435869edcbb4563ff934c9ccaf9ebcdc21354fe7ab74fb904ace05e9753be56e609d28b5707b8afed3f263757b8aeb2dd534b75b6289e69b537538dd5ef8ea09b0f12bc36c1d913c8615f0bc7f16162e8f0f0df5f9e6803ae8c511a5a938a9d11af0b3f4f22414d6b45a48e00fa86c45aa5690226e66039f0f2a54db4982191f70d6d2f6a55d022b627906a320ea88905998c350bace023e92a5b38e4bdd49c4503696c99c215397229a7cbf89616bc7e4f02aa16674ecb139009ff912802615ce2c3b5f25f191d28df306456930308717292909651fe1faa9ca9e6d0732db6c497a04c5011a9c8cfba380ac09cdbb7733f5e65d8830c44bd0ff640c9fc0056a9f667cebe9335083780b5b7a720c344cec7ad3433abb65e8162a7d2786135c2a747e648887136fe7359dfc09dfb41ecc5d82c577571782d5e183e5486ed6bab5143aa68552e05da0bdd18edf89c6570a14f963cc858b5ed63f4966fa8768753ad2bce89f7baeb5152bf2d6effb8c4125369b4e9ccda6b0b1ba1ba7301bb267af6dcbe084f16b994f3c61d98be318dea7b3e8a5c2f71f24bdca233f4c2579597aa6c7b92dfe1d98c8fa6c5b9b3f1c6c258276b921322f91c21229522d92c55b4958fffad79db3b2b9c9e97e26bfd864dec70c7a5897b6be51763c6450eb0d404921e727e2cc77d4255a9c06cc9f1253ce2fc397d86c50a837d757f4a0992c7b65142d1dd1720bd50bc2881b59c7ad03b7c4b9523123041c5f23c5ef36cfb1439dfd8c2ca4a44a3781c4f65978c8d2412e353e045bed5f4c3db2f069ceb839671c5ca1553d16dd5cf9a262e69cdf178f3b6498a39f606ed89baae530886bfbfe9b637ee62e81dbca570b081615984444966f22a49413773effe430db4b2ae0faa1c35f50bf1857a484a41e9122bb07df3ce42426420ed707ecc4743f3883cd228f98dfac12e0895babd3bbdfbf633ba8e889b4bcb2147f58818d0b1205d4e9ed8716356aac464605461d5a0a62d5ff0a059fe821693da153c1e41ec4c7a8d8f8d5b4990320b699e121cb7ce0853a739e9ae1e537e1b0ceb567cb0e2b51aae8d6a305c68c34f9c0e8cad154167e0205f45f563ecf83455ebc0e0b61812ddaedc3d2e4ff197822b4d7aa53290b596700395ac7279591c38645e04b636360aba43e8ba83a0405758aeb48e1339c729b74b19b1243ffde6ddb282cf9076f865de4812fa2e1838cd3b1f151a7065fa2959f47ea1536c120eae6c3e182882f9d28f56eb815d4aa2ba7835e749de03aba0049ad582488d7a7d69b2c86078966fff875bcf3"}}, @XFRMA_IF_ID={0x8, 0x1f, r6}]}, 0x236c}, 0x1, 0x0, 0x0, 0x40004050}, 0x8004) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x62, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 893.429430][T14873] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 893.458981][T14873] FAT-fs (loop5): Filesystem has been set read-only 23:02:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f448"], 0xd9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = dup2(0xffffffffffffffff, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000060000", @ANYRES32=r6, @ANYBLOB="0400000000000000000000000a00010072737670360000002c0002001400030000000000000000000000ffff0000000014000200fe880000000000000000000000000001"], 0x5c}}, 0x0) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r6}, 0x10) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2d717e203ee5f84b"], 0x1) r7 = eventfd(0x1f8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r7) socket$inet_sctp(0x2, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48080fffffffa) [ 893.615719][T14923] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:02:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x70, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 893.688785][T14923] FAT-fs (loop4): Filesystem has been set read-only 23:02:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x105206}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x1409, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}}, 0x800) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f00000003c0)=0x100) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r2, r2, 0x0, 0x8080fffffffe) 23:02:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x7e, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @rand_addr=0xdd}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f504be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf5c40bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759960bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5009235efcea227a56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d812967"], 0x18}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0) r4 = socket(0x0, 0x803, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xdee, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, 0x0, 0x0) 23:02:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x8c, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 894.333339][T14933] vivid-002: kernel_thread() failed 23:02:12 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r1, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000040)=@bpq0='bpq0\x00', 0x10) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x5c}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0xa0400, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a010a28437ee682e4219f809db8577e3cead05f11afe91ff07f72de3510dfae15f8e60a7d845ceefaa425127da683467a639298988d3f8068db76c68e2a5b4b72790d3877a2c9863422e6531287de7b0ff558afe91cef5770584f6c95920ff2c5338898394a8afe4434f3305f581f7237bd6f9fe71810d7832e3488147718b2ec8424c5c4f15b909336e05c1b582de78d482914b3a9f86f0f573f6c2462d125db3990bcb77e342982b07a5323961ff8af2ba9061a99fb0dbac8003e1f562ec32a506c44b1cd29954bc"], 0xc9) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_dccp_int(r2, 0x21, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x484000, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', r4}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000cc0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000000d00)={0x5f0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x6, 0x19a}, {0x2, 0x0, 0x4, 0x81}, {0x7, 0x20, 0xfc, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0x7, 0x3, 0x0, 0x8}, {0x0, 0x7, 0x2}, {0xb0d5, 0x2, 0xff, 0x1f}, {0xfff, 0x8, 0x1, 0x2}, {0x8001, 0x3f, 0x7f, 0x5dc}, {0x40, 0x4, 0x6, 0x8}, {0x1, 0x9, 0x8, 0x4}, {0xbb, 0x7, 0x8, 0x7}, {0xfffa, 0x7, 0x40, 0x2}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8, 0x7, 0x7e57}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r6}}}]}}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x4008000}, 0x2004d0d0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000040)={0x5, 0x6, 0x3ff, 0x5, 0xc7, 0x80, 0xfe01}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r7 = socket(0x10, 0x3, 0x0) write$nbd(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') [ 894.566505][T14981] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 894.583477][T14951] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 894.597677][T14981] FAT-fs (loop4): Filesystem has been set read-only [ 894.676023][T14951] FAT-fs (loop5): Filesystem has been set read-only 23:02:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f448"], 0xd9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x9a, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) inotify_init() r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="684b65a884a52c02173e17a6abd734ee4987c86ef0b3a2aaffe3666d43c2e012e5bda69bf2d8f9161a1165a58569420507d061b470e11cfcd3c8a22987454d2c6bd25fde7c2d2fdfd1ab0f4d3786a31f4b8de6307124dec9eaa6d41a11b71f5938e0cda257570b959590567d2fc519fcc72ce977f2d6e4783fcdc855dc116b0ec809a61f4ef454e51944d8e9289a2aafbe955499b9e714d417bf3c9e8e7048a08e0043d8a6"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140), 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) 23:02:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xa8, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x400001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) ioctl$RTC_UIE_ON(r1, 0x7003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r4, 0xab01, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0x21, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="00042cbd7000fddbdf2505000000080001007063690011000200303030303a302ab9c055c3303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464007673696d0000000f0002006e657464657673696d30c8837dde03"], 0x84}, 0x1, 0x0, 0x0, 0x20054084}, 0x801) fchdir(r5) r8 = open(&(0x7f0000000040)='./bus\x00', 0x101000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x14) sendfile(r8, r8, 0x0, 0x8080fffffffe) [ 895.041761][T15015] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 895.047599][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.060322][T15015] FAT-fs (loop4): Filesystem has been set read-only 23:02:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 895.182105][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.308565][T15036] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:02:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x23, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xb6, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x35287dc7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x129) ftruncate(r0, 0x1) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="54633c7e1cc3f033eae9b93045b677d82d7572898baaeac616037263e32139d5547153261f54260be83b8c0b3ea361de0b7f7a631fcff0dde1ea19873616e4d19d3c17f2f8b0934ea0f46127cd6809999e49eecb353b3b80f44d261d5217972980a00fea5d084860b74135e588294f02efa56f112f7e5e902d"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 895.357838][T15036] FAT-fs (loop4): Filesystem has been set read-only [ 895.478320][ T27] audit: type=1804 audit(1586473333.263:158): pid=15049 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1170/bus" dev="sda1" ino=16339 res=1 [ 895.805741][T15017] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 895.818350][T15017] FAT-fs (loop5): Filesystem has been set read-only 23:02:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) readlinkat(r0, &(0x7f0000000200)='./bus\x00', &(0x7f00000003c0)=""/203, 0xcb) sendto$inet(r1, &(0x7f0000000000)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xc4, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = gettid() tkill(r2, 0x1000000000016) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x8, 0x7, 0x1, 0x5}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000000)='\xff\xff\xff\xff\xff\x80\x01\x89vm~\tt', 0x4) ftruncate(r4, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000240)=""/84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x0, 0x0, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0x4, 0xff, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990af6, 0x6, [], @p_u8=&(0x7f0000000080)=0x5d}}) 23:02:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) [ 896.034847][T15058] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) 23:02:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16, 0x8}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x0) fchdir(r1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xd2, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 896.093155][T15058] FAT-fs (loop4): Filesystem has been set read-only [ 896.126957][T15072] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 23:02:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 896.167041][T15072] FAT-fs (loop5): Filesystem has been set read-only [ 896.197481][T15072] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 896.210348][T15072] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 896.221217][T15072] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 896.234796][T15068] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 23:02:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f448"], 0xd9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xe0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:02:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a031bba0856eda25a11ee142f7da25d91da6b15370acf2f17b2f9b25bc74d1531c97d2d5128a9ad5db896e8d38afd021ae0fba86ef5606805dec907a4a981752cbd10b0d0c010bd6def8a32ea83ce5f07ecbffd0384ff9306a94756f6a35fbc2496dbc7447dbb28dfecdecef391218ac203c785facd1c3fc3b6a37c8b0819792bffb536c484bd7f72189908e000000000000000000000000000000000000000000000000000000e3eacdb5245cea617af0fe6ac62f5fe0c0df406dfe0c1d0c607d87c9494831c2f371a8a20fa0f5bfed4f507c09ee257836a802de0d3789bcf04882afda1af3d94608ac7d8fe42d9d1ef8e752758d7c58cc59d956d9ac6ccdbd55a8ac1524182e7e8f299bdb9c73fa52f0c31d5975580bceeaac6ebba81bb976237ec273c73916f90ba38230cc8b4ec6af45c1d16cdcf4a97f05b70746a72da37d1390907dcda4fd92e09d32d5a503ca0ef46f1e0f91c6688cabf2282a60d8d801f5710d79fa98ecf0da0bdc6c57f8ade4109f18c332d645dd1b3f1e9749446d8400259c06c48f1976d5078e98012bee9761ce7aeaac2ed1cfac9b6ac91f20dd3e57aa6f1af1424fbccbd11f"], 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000300)=0x64, &(0x7f0000000340)=0x1) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r5 = accept4$alg(r0, 0x0, 0x0, 0x800) sendfile(r5, r0, 0x0, 0x100000001) [ 896.354183][T15091] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006500) [ 896.363163][T15091] FAT-fs (loop4): Filesystem has been set read-only 23:02:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xee, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0xfc, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20200, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x8, 0x5, 0x4}, 0x10) 23:02:16 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f0000000200)="7e32934f5bed51497cd3cdcae96a8d2ff1b6004d75d4abba769f0dbfc149ffe4fa24cf72e9d9bd05fea74105ecf910e43c018d9adfa75718e93e3720bda80bac0f4a6e824e8b27761e552c6354042fea7af9811cd25bf0e9b6d23a6783c0b4e9bcb2180a3c2eed96a6624d20b66015256354c4a28e5d4c5c2c5e78ea52ea6a45bea245017250ded6608f809b2feea8e431fc53d889c6aa5e74a937b44550797baa4a4d75080baf9d0b193d4d3805af3a14c48f9376d7559849977b3fc558e8e2ea383a944149f3136a37ca7b2b35da53036c7f7f410f795a75a84757c5f2f1a75bdae8c8984cc3ada7913efdedc41b6802f819", 0xf3, 0x4}], 0x8010, &(0x7f00000003c0)={[{@nls={'nls', 0x3d, 'none'}}, {@gid={'gid', 0x3d, r2}}, {@creator={'creator', 0x3d, "3f485edc"}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@hash='hash'}, {@seclabel='seclabel'}, {@smackfshat={'smackfshat', 0x3d, '#$lo'}}]}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000040), 0x1) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:02:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x10a, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="7e5f000018000000088f0d03828f830c00098c09040906078481868088070789"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0) r5 = socket(0x10, 0x3, 0x0) write$nbd(r5, 0x0, 0x0) 23:02:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f448"], 0xd9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x118, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 899.079726][T15152] hfsplus: unable to load nls mapping "none" [ 899.085778][T15152] hfsplus: unable to parse mount options 23:02:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) write$nbd(r3, 0x0, 0x0) 23:02:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16, 0x1}], 0x20000, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a03c0fa6c8d2bee779f9cbe82bd053a9b65bf956f619271a6ebfecac45640bf7236c55c4e06bc4651bae9f13e94d6bf448480388eb0ebe928d0f8bdfda8743078455ec9cdcd392b26cf58dcf0d8c427bbed1cb476bb69f61c29094cac0d5039872d20680882b802d79319b503c4f8b6bd60773cf35dde0d5475b4d250ab36f56a0b4c36553924a1c13721ece55af2d1593f011b67d02304eb2e0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x126, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff013}, {0x80000006}]}, 0x10) r1 = socket(0x25, 0xa, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r5, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r6 = dup2(0xffffffffffffffff, r5) read$FUSE(r6, &(0x7f00000002c0), 0x1000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r4, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) write$nbd(r1, 0x0, 0x0) [ 899.759512][T15142] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 899.786790][T15142] FAT-fs (loop5): Filesystem has been set read-only 23:02:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r0, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x134, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000100)) 23:02:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x9, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62e3837656976c40c1a4428b5dce67b02e7ea4fc83eb085b78db06fd4d94fc3eeaaf8f757ae8d93cf876d3eebfe9061a8577607bdb6f3f45f80418f01b6e27aeb116f23ff96b5f69ea1fe39ae3c0c7921384e75254a6665313c777996b98f4"], 0x139) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:02:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f448"], 0xd9) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x142, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x83) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000180)=""/249) socket$nl_crypto(0x10, 0x3, 0x15) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r3, r3, 0x0, 0x8080fffffffe) 23:02:18 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x29, 0x0, 0x0, 0x7ff}, {0x9}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRESOCT=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES16, @ANYBLOB="0040b20000000000"], 0x5}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0400000000000000000000000a0001007273767057145dd498348604473a060000002c0002001400030000000000000000000000ffff0000000014000200fe880000200000000000000000000001debcccf1d6a1056368ef51daac24d8ca8141e97b2e498aa18247d7facaafd361c951d0722150316be7d335555ff9a42f23fae09629dfc44b1467a03930f8d99c26218e19169ee0c4099f319a84e1389b97f6ef80a08d9d270eb40ec674cff34845c0c6f610fe6e878747942142889e"], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r7}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x1, r8, 0x1, 0x3}, 0x14) write$nbd(r1, 0x0, 0x0) 23:02:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000280)='./file0/../file0\x00', 0xffffffff7ffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xe59, 0x96082) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@multicast1, @broadcast, 0x0}, &(0x7f0000000240)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x5c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000021c0)={{{@in6=@ipv4={[], [], @local}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000022c0)=0xe8) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000023c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x36}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x150, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 900.441041][T15235] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x20013e, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="c3b386330000000043ae67fed7c9e81aa0"], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0x1a, @time={0x7ff, 0x5}, 0x81, {0x8, 0xdf}, 0x7, 0x0, 0x3}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x15e, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x6a000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) sendfile(r1, r1, 0x0, 0x8080fffffffe) 23:02:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 900.790090][T15209] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 900.817097][T15209] FAT-fs (loop5): Filesystem has been set read-only 23:02:18 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c000200050001"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 23:02:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f"], 0xda) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x910000000000000, 0xa4602) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0"], 0x1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x304, 0x4) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 901.003528][ T27] audit: type=1804 audit(1586473338.794:159): pid=15265 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir794690809/syzkaller.NF83hP/1181/bus" dev="sda1" ino=16366 res=1 [ 901.075419][T15271] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 23:02:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x16c, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:19 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x800, 0x7) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) migrate_pages(r4, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)=0x2) r5 = syz_open_procfs(r4, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r6, 0x0, r3, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x7}, [{0x2, 0x1}, {}], {0x4, 0x5}, [{0x8, 0x3}, {0x8, 0x0, r3}], {0x10, 0x1}}, 0x44, 0x1) [ 901.214788][T15284] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff012}, {0x80000006, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:02:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x17a, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e00", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "6773d1", 0x0, 0x3a, 0x0, @loopback, @remote, [], "397819fbbbf2cd5d"}}}}}}}, 0x0) 23:02:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @val={0x3}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}, "919dba2200000000000000000b000300"}}}, 0xfdef) 23:02:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "bf6e00", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "6773d1", 0x0, 0x3a, 0x0, @loopback, @remote, [], "397819fbbbf2cd5d"}}}}}}}, 0x0) 23:02:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x188, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 901.918849][T15278] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 901.997480][T15278] FAT-fs (loop5): Filesystem has been set read-only 23:02:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f"], 0xda) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x4000000028, 0xfa, 0x0, 0xfffff011}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000080)='\'\x00', &(0x7f00000000c0)='cgroup\x00', &(0x7f0000000100)='trusted[.securitytrusted+user&cgroup&@eth1\x00', &(0x7f0000000180)='GPL!\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='-', &(0x7f0000000240)='vmnet1lo\x00', &(0x7f0000000280)='eth0cpusetvboxnet0{eth1\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='\'selfselinux-trustedem0{wlan1\x00'], 0x100) write$nbd(r1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0xe341, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000004c0)={0x5, 0xffffffffffff30f7, 0xfffffffffffffffa, 0x2}) 23:02:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 23:02:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x196, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 23:02:20 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) setresuid(0x0, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mount$9p_virtio(&(0x7f0000000100)='syz\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,nodevmap,access=', @ANYRESDEC=r4, @ANYBLOB=',cache=none,appraise,smackfshat=\\vmfet0?\'`@{,vmne|1Om0user\x00,obj_type=Kgroupvboxnet0systemem1,dont_measure,uid<', @ANYRESDEC=r6, @ANYBLOB=',permit_directio,context=sysadm_u,\x00']) 23:02:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) 23:02:20 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 23:02:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1a4, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:20 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0xe6, 0x8, 0x1, 'queue0\x00', 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1b2, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:20 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40180, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 903.036989][T15351] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 903.063227][T15351] FAT-fs (loop5): Filesystem has been set read-only 23:02:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f"], 0xda) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1c0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:20 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xcc, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r3, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1ce, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x570, 0x3b0, 0x290, 0x0, 0x1c0, 0xd0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@rand_addr="6d340df9fac076b0a1771db1bfa2540c", @loopback, [], [], 'geneve0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [], 'caif0\x00', 'ipvlan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 23:02:21 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x3) 23:02:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1dc, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 903.526953][T15421] x_tables: duplicate underflow at hook 1 23:02:21 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/unix\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, 0x700) 23:02:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x2, {0x0, 0x0, 0xffffffff}}) 23:02:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1ea, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x2, {0x0, 0x0, 0xffffffff}}) [ 904.069447][T15408] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 904.087838][T15408] FAT-fs (loop5): Filesystem has been set read-only 23:02:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x1f8, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x2, {0x0, 0x0, 0xffffffff}}) 23:02:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x0, 0x2, {0x0, 0x0, 0xffffffff}}) 23:02:22 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800001, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00ea12ac8209ee7ead2d3400"}}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x10000, "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", 0x81, 0x4, 0x6, 0x1f, 0x7, 0x3, 0x5}, r4}}, 0x120) 23:02:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x203, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:22 executing program 3: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="29000000010000000b"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') lseek(r0, 0x1f, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0xc0000000) 23:02:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x206, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) ioctl$TIOCGPTLCK(r2, 0x80045439, 0x0) 23:02:22 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200200, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x20000, 0xb2a, 0xfffffff5}}) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) r4 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r4, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x214, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom(r0, &(0x7f0000000100)=""/94, 0xffffffffffffff5e, 0x10100, 0x0, 0x0) 23:02:22 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x222, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 905.150152][T15505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:02:23 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') r2 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x81, 0x1) sendfile(r3, r2, &(0x7f0000000100)=0xf18001, 0x7) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x230, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x23e, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:23 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:23 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{0x3, 0x1, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "7255ab09861ccb62"}, 0x10}, 0x1, 0x0, 0x0, 0x4002835}, 0x2004c040) 23:02:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1028, 0x86, 0x0, 0x4}, {0x80000006, 0x0, 0x0, 0x10}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.swap.current\x00', 0x26e1, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x0, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x20, 0x0, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40002) [ 905.489377][ C1] [ 905.491851][ C1] ======================================================== [ 905.499032][ C1] WARNING: possible irq lock inversion dependency detected [ 905.506219][ C1] 5.6.0-syzkaller #0 Not tainted [ 905.511348][ C1] -------------------------------------------------------- [ 905.518540][ C1] ksoftirqd/1/16 just changed the state of lock: [ 905.524857][ C1] ffffffff89209098 (tasklist_lock){.+.?}-{2:2}, at: send_sigurg+0xcd/0x320 [ 905.533723][ C1] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 905.541256][ C1] (&pid->wait_pidfd){+.+.}-{2:2} [ 905.541266][ C1] [ 905.541266][ C1] [ 905.541266][ C1] and interrupts could create inverse lock ordering between them. [ 905.541266][ C1] [ 905.560766][ C1] [ 905.560766][ C1] other info that might help us debug this: [ 905.568822][ C1] Possible interrupt unsafe locking scenario: [ 905.568822][ C1] [ 905.577265][ C1] CPU0 CPU1 [ 905.582775][ C1] ---- ---- [ 905.588149][ C1] lock(&pid->wait_pidfd); [ 905.592649][ C1] local_irq_disable(); [ 905.599513][ C1] lock(tasklist_lock); [ 905.606268][ C1] lock(&pid->wait_pidfd); [ 905.613341][ C1] [ 905.616787][ C1] lock(tasklist_lock); [ 905.621197][ C1] [ 905.621197][ C1] *** DEADLOCK *** [ 905.621197][ C1] [ 905.629521][ C1] 4 locks held by ksoftirqd/1/16: [ 905.634542][ C1] #0: ffffffff892e6bd0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 905.643926][ C1] #1: ffffffff892e6bd0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 905.653548][ C1] #2: ffff888094f8eee0 (slock-AF_INET/1){+.-.}-{2:2}, at: tcp_v4_rcv+0x3393/0x49f0 [ 905.663002][ C1] #3: ffff888091de4df8 (&f->f_owner.lock){.?.?}-{2:2}, at: send_sigurg+0x24/0x320 [ 905.672466][ C1] [ 905.672466][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 905.681839][ C1] -> (&pid->wait_pidfd){+.+.}-{2:2} { [ 905.687301][ C1] HARDIRQ-ON-W at: [ 905.691383][ C1] lock_acquire+0x169/0x480 [ 905.697919][ C1] _raw_spin_lock+0x2a/0x40 [ 905.704319][ C1] proc_pid_make_inode+0x187/0x2d0 [ 905.711285][ C1] proc_pid_instantiate+0x4b/0x1a0 [ 905.718378][ C1] proc_pid_lookup+0x218/0x2f0 [ 905.724977][ C1] proc_root_lookup+0x1b/0x50 [ 905.731484][ C1] __lookup_slow+0x240/0x370 [ 905.738157][ C1] walk_component+0x442/0x680 [ 905.744658][ C1] link_path_walk+0x66d/0xba0 [ 905.751158][ C1] path_openat+0x21d/0x38b0 [ 905.757486][ C1] do_filp_open+0x191/0x3a0 [ 905.763898][ C1] do_sys_openat2+0x463/0x770 [ 905.770579][ C1] __x64_sys_open+0x1af/0x1e0 [ 905.777127][ C1] do_syscall_64+0xf3/0x1b0 [ 905.783455][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 905.791166][ C1] SOFTIRQ-ON-W at: [ 905.795236][ C1] lock_acquire+0x169/0x480 [ 905.801567][ C1] _raw_spin_lock+0x2a/0x40 [ 905.807890][ C1] proc_pid_make_inode+0x187/0x2d0 [ 905.815006][ C1] proc_pid_instantiate+0x4b/0x1a0 [ 905.821940][ C1] proc_pid_lookup+0x218/0x2f0 [ 905.828534][ C1] proc_root_lookup+0x1b/0x50 [ 905.835145][ C1] __lookup_slow+0x240/0x370 [ 905.841561][ C1] walk_component+0x442/0x680 [ 905.848085][ C1] link_path_walk+0x66d/0xba0 [ 905.854591][ C1] path_openat+0x21d/0x38b0 [ 905.860927][ C1] do_filp_open+0x191/0x3a0 [ 905.867264][ C1] do_sys_openat2+0x463/0x770 [ 905.873771][ C1] __x64_sys_open+0x1af/0x1e0 [ 905.880390][ C1] do_syscall_64+0xf3/0x1b0 [ 905.886720][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 905.894432][ C1] INITIAL USE at: [ 905.898414][ C1] lock_acquire+0x169/0x480 [ 905.904689][ C1] _raw_spin_lock_irqsave+0x9e/0xc0 [ 905.914498][ C1] __wake_up+0xb8/0x150 [ 905.920479][ C1] do_notify_parent+0x167/0xce0 [ 905.927162][ C1] do_exit+0x12c5/0x1f80 [ 905.933728][ C1] call_usermodehelper_exec_async+0x47c/0x480 [ 905.941622][ C1] ret_from_fork+0x24/0x30 [ 905.948896][ C1] } [ 905.951552][ C1] ... key at: [] alloc_pid.__key+0x0/0x10 [ 905.959692][ C1] ... acquired at: [ 905.963585][ C1] lock_acquire+0x169/0x480 [ 905.968259][ C1] _raw_spin_lock_irqsave+0x9e/0xc0 [ 905.973665][ C1] __wake_up+0xb8/0x150 [ 905.977985][ C1] do_notify_parent+0x167/0xce0 [ 905.983014][ C1] do_exit+0x12c5/0x1f80 [ 905.987423][ C1] call_usermodehelper_exec_async+0x47c/0x480 [ 905.994611][ C1] ret_from_fork+0x24/0x30 [ 905.999185][ C1] [ 906.001510][ C1] -> (tasklist_lock){.+.?}-{2:2} { [ 906.006609][ C1] HARDIRQ-ON-R at: [ 906.010584][ C1] lock_acquire+0x169/0x480 [ 906.016817][ C1] _raw_read_lock+0x2d/0x40 [ 906.023052][ C1] do_wait+0x280/0x6a0 [ 906.029126][ C1] kernel_wait4+0x1d1/0x2c0 [ 906.035537][ C1] call_usermodehelper_exec_work+0xea/0x320 [ 906.043076][ C1] process_one_work+0x76e/0xfd0 [ 906.049606][ C1] worker_thread+0xa7f/0x1450 [ 906.056413][ C1] kthread+0x353/0x380 [ 906.062126][ C1] ret_from_fork+0x24/0x30 [ 906.068168][ C1] IN-SOFTIRQ-R at: [ 906.072134][ C1] lock_acquire+0x169/0x480 [ 906.078281][ C1] _raw_read_lock+0x2d/0x40 [ 906.084856][ C1] send_sigurg+0xcd/0x320 [ 906.091992][ C1] sk_send_sigurg+0x6a/0xb0 [ 906.098372][ C1] tcp_urg+0x270/0xad0 [ 906.104094][ C1] tcp_rcv_established+0x90b/0x1fa0 [ 906.111274][ C1] tcp_v4_do_rcv+0x398/0x860 [ 906.117647][ C1] tcp_v4_rcv+0x3c1c/0x49f0 [ 906.123800][ C1] ip_protocol_deliver_rcu+0x390/0x750 [ 906.131076][ C1] ip_local_deliver+0x311/0x490 [ 906.137744][ C1] __netif_receive_skb+0x136/0x370 [ 906.144667][ C1] process_backlog+0x4e8/0x950 [ 906.151082][ C1] net_rx_action+0x62f/0x1140 [ 906.157573][ C1] __do_softirq+0x268/0x80c [ 906.167059][ C1] run_ksoftirqd+0x60/0xf0 [ 906.173239][ C1] smpboot_thread_fn+0x572/0x970 [ 906.179899][ C1] kthread+0x353/0x380 [ 906.185885][ C1] ret_from_fork+0x24/0x30 [ 906.192191][ C1] SOFTIRQ-ON-R at: [ 906.196166][ C1] lock_acquire+0x169/0x480 [ 906.202576][ C1] _raw_read_lock+0x2d/0x40 [ 906.209273][ C1] do_wait+0x280/0x6a0 [ 906.214984][ C1] kernel_wait4+0x1d1/0x2c0 [ 906.221122][ C1] call_usermodehelper_exec_work+0xea/0x320 [ 906.229623][ C1] process_one_work+0x76e/0xfd0 [ 906.236644][ C1] worker_thread+0xa7f/0x1450 [ 906.242962][ C1] kthread+0x353/0x380 [ 906.249447][ C1] ret_from_fork+0x24/0x30 [ 906.255504][ C1] INITIAL USE at: [ 906.259763][ C1] lock_acquire+0x169/0x480 [ 906.266337][ C1] _raw_write_lock_irq+0x67/0x80 [ 906.273006][ C1] copy_process+0x2d14/0x52f0 [ 906.279225][ C1] _do_fork+0x134/0x650 [ 906.284947][ C1] kernel_thread+0xf7/0x140 23:02:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) [ 906.291165][ C1] rest_init+0x1f/0x2a0 [ 906.297006][ C1] start_kernel+0x674/0x774 [ 906.303065][ C1] secondary_startup_64+0xa4/0xb0 [ 906.309643][ C1] } [ 906.312420][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 906.320297][ C1] ... acquired at: [ 906.324139][ C1] mark_lock+0x529/0x1b00 [ 906.329332][ C1] __lock_acquire+0xaa7/0x2b90 [ 906.334536][ C1] lock_acquire+0x169/0x480 [ 906.339271][ C1] _raw_read_lock+0x2d/0x40 [ 906.343945][ C1] send_sigurg+0xcd/0x320 [ 906.348453][ C1] sk_send_sigurg+0x6a/0xb0 [ 906.353144][ C1] tcp_urg+0x270/0xad0 [ 906.358516][ C1] tcp_rcv_established+0x90b/0x1fa0 [ 906.364166][ C1] tcp_v4_do_rcv+0x398/0x860 [ 906.369028][ C1] tcp_v4_rcv+0x3c1c/0x49f0 [ 906.373708][ C1] ip_protocol_deliver_rcu+0x390/0x750 [ 906.379520][ C1] ip_local_deliver+0x311/0x490 [ 906.384807][ C1] __netif_receive_skb+0x136/0x370 [ 906.390276][ C1] process_backlog+0x4e8/0x950 [ 906.395546][ C1] net_rx_action+0x62f/0x1140 [ 906.400405][ C1] __do_softirq+0x268/0x80c [ 906.405157][ C1] run_ksoftirqd+0x60/0xf0 [ 906.409999][ C1] smpboot_thread_fn+0x572/0x970 [ 906.415749][ C1] kthread+0x353/0x380 [ 906.420143][ C1] ret_from_fork+0x24/0x30 [ 906.424939][ C1] [ 906.427565][ C1] [ 906.427565][ C1] stack backtrace: [ 906.434067][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.6.0-syzkaller #0 [ 906.441956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.452519][ C1] Call Trace: [ 906.455845][ C1] dump_stack+0x1e9/0x30e [ 906.460982][ C1] print_irq_inversion_bug+0xb67/0xe90 [ 906.466557][ C1] ? arch_stack_walk+0xb4/0xe0 [ 906.471432][ C1] ? ret_from_fork+0x24/0x30 [ 906.476211][ C1] check_usage_forwards+0x13f/0x240 [ 906.481410][ C1] ? save_trace+0x49/0xb60 [ 906.485818][ C1] mark_lock+0x529/0x1b00 [ 906.490233][ C1] ? check_usage_backwards+0x240/0x240 [ 906.497686][ C1] __lock_acquire+0xaa7/0x2b90 [ 906.502694][ C1] ? tcp_ack+0x4545/0x67f0 [ 906.507276][ C1] lock_acquire+0x169/0x480 [ 906.511762][ C1] ? send_sigurg+0xcd/0x320 [ 906.516252][ C1] _raw_read_lock+0x2d/0x40 [ 906.520753][ C1] ? send_sigurg+0xcd/0x320 [ 906.525395][ C1] send_sigurg+0xcd/0x320 [ 906.529709][ C1] sk_send_sigurg+0x6a/0xb0 [ 906.534243][ C1] tcp_urg+0x270/0xad0 [ 906.538301][ C1] tcp_rcv_established+0x90b/0x1fa0 [ 906.544229][ C1] ? lock_acquire+0x169/0x480 [ 906.549069][ C1] ? tcp_v4_rcv+0x3393/0x49f0 [ 906.553739][ C1] tcp_v4_do_rcv+0x398/0x860 [ 906.558424][ C1] tcp_v4_rcv+0x3c1c/0x49f0 [ 906.562971][ C1] ? rcu_lockdep_current_cpu_online+0xce/0xf0 [ 906.569038][ C1] ip_protocol_deliver_rcu+0x390/0x750 [ 906.574506][ C1] ip_local_deliver+0x311/0x490 [ 906.579346][ C1] ? ip_local_deliver_finish+0x2f0/0x2f0 [ 906.584994][ C1] __netif_receive_skb+0x136/0x370 [ 906.590157][ C1] ? debug_smp_processor_id+0x5/0x20 [ 906.595425][ C1] process_backlog+0x4e8/0x950 [ 906.600999][ C1] net_rx_action+0x62f/0x1140 [ 906.605736][ C1] __do_softirq+0x268/0x80c [ 906.610455][ C1] ? run_ksoftirqd+0x60/0xf0 [ 906.615128][ C1] run_ksoftirqd+0x60/0xf0 [ 906.619983][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 906.625185][ C1] smpboot_thread_fn+0x572/0x970 [ 906.630216][ C1] kthread+0x353/0x380 [ 906.634441][ C1] ? cpu_report_death+0x110/0x110 [ 906.639456][ C1] ? kthread_blkcg+0xd0/0xd0 23:02:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x24c, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 906.644222][ C1] ret_from_fork+0x24/0x30 23:02:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x9}, &(0x7f0000000280)=0x90) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') 23:02:24 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r2, &(0x7f0000000680)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x5}, 0x1) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000700)={0x1800000, 0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x5, 0x8, 0x4, 0x0, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x81}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_BMAP(r6, &(0x7f00000006c0)={0x18, 0xfffffffffffffffe, 0x5, {0x3}}, 0x18) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:24 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0x5}) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee01}, {0x2, 0x2}, {0x2, 0x6}, {0x2, 0x4}], {0x4, 0x7}, [{0x8, 0x7}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x3}, {0x8, 0x1}, {0x8, 0x3, r3}], {0x10, 0x1}, {0x20, 0x4}}, 0x7c, 0x7) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)={0xfc000000, 0x6, 0x4, 0x20000, 0x2, {r6, r7/1000+10000}, {0x4, 0x8, 0x1e, 0x1, 0x6, 0x9, "442154fb"}, 0x80, 0x4, @fd, 0x2c, 0x0, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000080)=0x12, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x41441, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x30}]}, 0x4c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000200)=0x7b47, &(0x7f0000000180)=0x2) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r4, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x68ce, 0x7f, 0x1, 0x800000, 0xffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000040)={[0x3000, 0x0, 0x2, 0x6000], 0x5, 0x0, 0x4}) write$nbd(r5, 0x0, 0x0) 23:02:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x9}, &(0x7f0000000280)=0x90) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') 23:02:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x25a, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:24 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4ad2}, 0x10) write(r2, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "68badb31e92f66e9", "58a1b111c6ad1383833e9ca787217f3a58640704fcc5c3fdef05445a4f4cbd8b", "45ee159e", "c966c208288ed97f"}, 0x38) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x268, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:24 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x2080, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x276, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:25 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000080)={0x2000}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x1, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, 0x4}, &(0x7f00000001c0)=0x8) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x9}, &(0x7f0000000280)=0x90) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') 23:02:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) [ 907.830975][T15620] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 907.849475][T15620] FAT-fs (loop5): Filesystem has been set read-only 23:02:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x88b6, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x0, 0x1000}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x284, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x9}, &(0x7f0000000280)=0x90) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') 23:02:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:25 executing program 4: exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x292, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 908.020616][T15639] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 908.042552][T15639] FAT-fs (loop5): Filesystem has been set read-only 23:02:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2a0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 908.178386][T15658] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 908.206677][T15658] FAT-fs (loop5): Filesystem has been set read-only 23:02:26 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x8}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x280080c0}, 0x8840) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x78) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x561000, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01001f46", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r6, 0x1, '!'}, &(0x7f0000000000)=0x3e2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r6, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r7}, 0x8) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x1ff, 0x0, 0x8, 0x9, 0x3, 0x6], 0x6, 0x4, 0x2, 0x2, 0x0, 0xb99c, 0xab6, {0x7, 0x8, 0x0, 0x9, 0x4, 0x4, 0x9a, 0x2, 0x40, 0xfffc, 0x100, 0x20, 0xa8f, 0x0, "9769415b0a2ac408eac98dcceed0e9ff0391c79fc44a9a976c513e90a131f396"}}) 23:02:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="d1bb91a79edf8b1944da02000000a2df450450b5e3b61fb198a2c4b7e007e8610691eca662fc14641e12b3d9c9c00b30b668f50c0e2fb4eff8bc2054b7a4855c3a22459f5c8d002a81db90a2d89612898f710de997cb9de732450a6ade688d6a17153cb62abb7f531e47acd5c3ddabe02db154f5c465ca91bc6e7e3ebe46b2e97fe99d21149db880b7f5103d7849be4e2291eeba77795d677e5b88cddff69dc2cea1539eecf602d692dfd64b6097034ba5fb7eb38c67eb12ef201bd918b87f78dbbce953817102f465dff8b0e5d1e622041859a60448b4962dd0f22b7b6b64ca8f61ef17ed1d4549f8ca8050d8cccf466be8961253b53d9f95c9ca6fba1da536aa0a8413418c730d77f0567c9cf6238f3b0735f8d3064947f5e3f03547ab6271f01d5145e58271d47de56e3567a0086b31f6a745a7c635b3a4a63936c611fed8a97cb4f2ba3cb2da5356df4049db5109a9efffedee3aae0e290ffb527cfc790e183594b82c5996cfc2dc75b05eb4b75ff253c0c907aab8cc69921ca706d023390196ae3365746d66d4ebadcfa3d256de03b1d3be944c67e4ece3d2352516e70c89dcd600032d", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x9}, &(0x7f0000000280)=0x90) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') 23:02:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2ae, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4ace}, 0x10) write(r3, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) fsetxattr$security_ima(r2, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "c30bb846ff17fec80e7bf8d84eee8bdb4f36ebcc"}, 0x15, 0x3) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000180)=0x3, 0x4) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000040)={0xfffffffa, "bdd2a7f79c00b7ce2d18d29cb96a5975118751c37f2d8e3d8e9d9c7f5640b198", 0x0, 0x926, 0x7f, 0x10, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x280400, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000140)=0x9) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 908.638693][T15681] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 908.677800][T15681] FAT-fs (loop5): Filesystem has been set read-only 23:02:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2bc, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 4: exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0x400}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:02:26 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x401, 0x5, 0x4}) r3 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r3, 0x1000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x80000007, 0x50, 0x6, 0x92000000, 0x6, 0x7fff, 0x3ff}, {0x7, 0x0, 0x2, 0x2, 0x3, 0x0, 0x8001}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2ca, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x9}, &(0x7f0000000280)=0x90) 23:02:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x80, 0x5, 0xfffff010}, {0x80000006}]}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400200, 0x0) r1 = socket(0x10, 0x5, 0x0) write$nbd(r1, 0x0, 0x0) [ 908.946034][T15716] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 908.978461][T15716] FAT-fs (loop5): Filesystem has been set read-only 23:02:26 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 23:02:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2d8, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) 23:02:26 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x2c, 0x3, 0x240, 0x0, 0xe8, 0x1a8, 0xb6, 0xe8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1422, 0x2, 0xffffffff, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) [ 909.259924][T15763] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 909.268356][T15763] FAT-fs (loop5): Filesystem has been set read-only 23:02:27 executing program 4: exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:27 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x104) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x2, 0x1e, 0x7ff, 0x20000000000, 0x7, 0x0, 0x6, 0x1, 0x5, 0x1, 0x8, 0x7, 0x10000000000000, 0x0, 0x2, 0x3023], 0x1, 0x10}) 23:02:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2e6, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:27 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0x7f}, {0x80000006, 0x0, 0x4}]}, 0x10) r0 = socket(0x10, 0x3, 0x0) write$nbd(r0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000380)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x5c}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)=r6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000070a010300000000000000000a000008340007400635dabd5b5929518720d980d059fc7f81825fa50404bf7e6c2e71b7d5bc1712a21bb3bc274203a51165e04f664026600c00034000000000000000040c000340000000000000000424000580bf65518a4f11350508000140000088f70800014054368a8f0800014000000006674dd60376c070117ea1baf1cada308eb7f99d13c0c097b6a4704b6a129a6d3b36a4a6c3bc7a5ea2d51e951f84d2cbe4f30cee1f872498e2ee2b86403285dfcb5942c4e673412a947040034ca3dbc5e5a5210df97d22c8c3914fb6c09fbcbe843aaee90a3e"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) write(r1, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:02:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 23:02:27 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20000800) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x2f4, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) 23:02:27 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xe3, 0x0, 0x0, 0x2}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(r3, &(0x7f0000000440)='./file0\x00', 0x70f3c0, 0x188) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x13, 0x0, &(0x7f0000000480)="9baeea8a4bf11c321eb5da988d28116b8d13a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000480)={r0, r5}) write(r1, &(0x7f0000000080)="9e00000052001f0014f9f407112c04091c0007ed8a0001000a0000000900000000000000", 0x9e) connect$netrom(r1, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x2, 0x25e}, {0x4}]}, 0x42) r6 = socket(0x10, 0x3, 0x0) write$nbd(r6, 0x0, 0x0) 23:02:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 909.816236][T15786] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 909.843785][T15786] FAT-fs (loop5): Filesystem has been set read-only [ 910.000717][T15825] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 910.019452][T15825] FAT-fs (loop5): Filesystem has been set read-only 23:02:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r3, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000200)={{0x16, @loopback, 0x4e23, 0x0, 'sed\x00', 0x24, 0x800, 0x4d}, {@loopback, 0x4e23, 0x2000, 0x4, 0x8, 0x4}}, 0x44) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x70, &(0x7f0000000140), &(0x7f0000000340)=0x8) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x7fffffff, 0x5, 0x4, 0x20000000, 0xca, {}, {0x4, 0x2, 0x3f, 0x1, 0x86, 0xf6, "2aaddb34"}, 0x10000, 0x4, @fd, 0xabff, 0x0, r3}) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r4) r5 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r5, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = gettid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x8, 0x4f, 0x40, 0x0, 0x41c1, 0x51082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000003c0), 0x7}, 0x40000, 0x2, 0xffffffff}, r6, 0x0, 0xffffffffffffffff, 0x2) sendfile(r0, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) 23:02:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x302, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x25, 0x5, 0x0) write$nbd(r1, 0x0, 0x0) 23:02:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x310, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 910.591142][T15840] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 910.604910][T15840] FAT-fs (loop5): Filesystem has been set read-only [ 910.628937][T15838] caif:caif_disconnect_client(): nothing to disconnect 23:02:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:02:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x31e, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 910.749378][T15838] caif:caif_disconnect_client(): nothing to disconnect 23:02:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x101000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x40, @rand_addr="aa6f667b1cbf8fc26a4d5cc68c7c5645", 0xc85}}, 0x0, 0x0, 0x18, 0x0, "d82f4141bed4561df3fd6a82ddd4e6df6c873abd4ec72100e850128dfe6170bc9055cf8414b4b42b836b557a32e69a3609ef9cfaa693902c6a2518b9ab915bfcf866fee921c9716fa5a2b71780432567"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r2 = socket(0x10, 0x3, 0x0) write$nbd(r2, 0x0, 0x0) [ 910.824580][T15874] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 910.862863][T15874] FAT-fs (loop5): Filesystem has been set read-only 23:02:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x32c, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:29 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) 23:02:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x40}, {0x9, 0xdc, 0x3, 0x8001}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0143ef0021"], &(0x7f0000000000)=0x3e2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e21, 0x6199ba2d, @ipv4={[], [], @loopback}, 0x10000}}, 0x8640, 0x3f, 0x7, 0x6, 0x8001}, &(0x7f00000003c0)=0xc2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xf10000, 0x20, 0x8, r2, 0x0, &(0x7f0000000080)={0x98091a, 0xfffffffe, [], @string=&(0x7f0000000040)}}) accept$alg(r5, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)={0x5, 0x8, 0x4, 0x0, 0x5, {}, {0x2, 0x1, 0x0, 0x0, 0xff, 0x8, "4dccc0ee"}, 0x9, 0x4, @offset=0x4, 0x2, 0x0, 0xffffffffffffffff}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x5}, 0x4) 23:02:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="88ff7f00000bcfe847a071") sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1240, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1224, 0x3, 0x0, 0x1, [{0x1220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x37, 0x6, 0x1, 0x0, "f96e772b52fa0aacd6cb03f2658b562b65d40c2c199e0cf6f148a292b1e0eefe89178891b8bee1ae125bf793d86249799f95d9"}, @NFTA_SET_ELEM_KEY={0x11e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "ef2560993c267695c1477d56e24ffdd61efc962846fa3edbf8c5d889c03a2f220561f93b9b867ae0bb3b530c3c47755be6221c81cecbb11e5b8e5d14ea2bf1088cbe9e19e283624bfe9f8f23b6462873e289b367e4e05cf08e6fab06f4b89d8cbd16e9eda31ea2c9ce9e969328c5b9b383145f779f2af0f4fe92c3137c0675f0098f44027aab59c6a0116cba73eeeaf910e90db868ea6b4367cd2f1cbd807149d1f582cc6c8d9da1878bf4653229dcb7bb65834782"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "fcce7554abc1a10990b7e8e8c95054eb05ecd3e2e6e102d3247e0ae5bdd9685744e35b5529ff7e7cb18f98e6f0875e1171c00b175021adadec8328f576b5578d6b0d90a393e06e5278e24f20cebcfc2046ab973e02aff3fc11a11441bc60e91bd68578ab34e768a1a76dd052eaa0e160f9c238ba6d043e2e175856828d2f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1240}, 0x1, 0x0, 0x0, 0x2004c845}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000140)={0x1ff, 0x1}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r4, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:29 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000180)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r2, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x70, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ftruncate(r2, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockname$llc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000200)=0x10) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x33a, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) [ 911.482775][T15899] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 911.502081][T15899] FAT-fs (loop5): Filesystem has been set read-only 23:02:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:02:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x348, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x356, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x364, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x372, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x0) 23:02:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2000, 0xaa, 0x0, 0x0, 0x6, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x1002) 23:02:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x380, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x0, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6c9f3b13"}, 0x0, 0x0, @userptr}) r2 = socket(0x10, 0x3, 0x0) write$nbd(r2, 0x0, 0x0) 23:02:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x38e, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:30 executing program 1: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept(r2, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x80) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) ioprio_set$uid(0x3, 0x0, 0x8) 23:02:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x39c, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf741dd60000ffff0000fffff2045dd89e6ff3120f1104a8e92af6974cd08c25f1d5f5f264e527baa14b9c1cd417ec004c1ab824692340eabfffc77dcd13343b820900ccabac8cacefbc59623b243ec8badc281d9e2d2eb07d048644cdfa57b9986050273090a257546ac99a3cbd64f78b0cbc822e83b8c8c89f299b2a5ccde39d825d29abe92e4c9f15a7dd7101edffde7ea7f59acbd51950939f75fcaf2c0471ca7fc33c1d97f0d51ce9fd9f34ef9c0b7bedb5048661820531c8d6a7f57c762af711fa12777d4c4c7126f4483f62"], 0xdb) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0x0) 23:02:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket(0x10, 0x3, 0x0) write$nbd(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSBRK(r3, 0x5409, 0x33b8) 23:02:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x3aa, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="a0e912499a9564385ea12e5bdf74"], 0xe) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0)=0x3b8, 0x8080fffffffe) creat(&(0x7f0000000780)='./file0\x00', 0x0) 23:02:30 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x3ff, 0xf, 0x4, 0x80000, 0xed, {r3, r4/1000+10000}, {0x3, 0x2, 0xff, 0x81, 0x7, 0x29, "68834754"}, 0x400, 0x3, @planes=&(0x7f00000000c0)={0x800, 0x3, @fd=r6, 0xffff}, 0xffff, 0x0, 0xffffffffffffffff}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00ea12ac8209ee7ead2d3400"}}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r9, 0x10, 0x0, @ib={0x1b, 0x8, 0x10000, {"b9e6905c53244200c04eaf7a13545215"}, 0x100000000, 0x0, 0x800}}}, 0x90) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r11 = socket(0x23, 0x800, 0x0) write$nbd(r11, 0x0, 0x0) 23:02:30 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') exit(0x0) p