x16e/0xbe0 [ 1982.299643] ? atime_needs_update+0x5f0/0x5f0 [ 1982.304160] ? generic_file_splice_read+0x53a/0x800 [ 1982.309192] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1982.313691] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1982.322255] ? add_to_pipe+0x350/0x350 [ 1982.322286] ? rw_verify_area+0x118/0x360 [ 1982.322300] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1982.322319] direct_splice_actor+0x126/0x1a0 [ 1982.322363] splice_direct_to_actor+0x369/0x970 [ 1982.322382] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1982.322402] ? do_splice_to+0x190/0x190 [ 1982.353617] ? rw_verify_area+0x118/0x360 [ 1982.357778] do_splice_direct+0x1da/0x2a0 [ 1982.360518] FAT-fs (loop5): Filesystem has been set read-only [ 1982.361937] ? splice_direct_to_actor+0x970/0x970 [ 1982.361959] ? rcu_read_lock_sched_held+0x110/0x130 [ 1982.361973] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1982.361987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.362003] ? __sb_start_write+0x1ac/0x360 [ 1982.362020] do_sendfile+0x597/0xd00 [ 1982.362046] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1982.362076] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1982.362093] ? _copy_from_user+0xdd/0x150 [ 1982.362113] __x64_sys_sendfile64+0x15a/0x220 [ 1982.362131] ? __ia32_sys_sendfile+0x230/0x230 [ 1982.362149] ? do_syscall_64+0x26/0x610 [ 1982.423410] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1982.428001] ? trace_hardirqs_on+0x67/0x230 [ 1982.432342] do_syscall_64+0x103/0x610 [ 1982.436247] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1982.441457] RIP: 0033:0x457e39 [ 1982.444656] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.463560] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1982.471277] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1982.478552] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1982.485828] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1982.493114] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1982.500386] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 [ 1982.508925] net_ratelimit: 24 callbacks suppressed [ 1982.508951] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.519503] protocol 88fb is buggy, dev hsr_slave_1 13:23:50 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x8}, 0x2) 13:23:50 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x401, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:23:50 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = socket(0x5, 0x80801, 0x1) getpeername$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) 13:23:50 executing program 0: r0 = getpgrp(0xffffffffffffffff) getpgrp(r0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x400, 0x20000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x1c, 0x10, "eaf861d8c5a2499056c8ce2ba097b5e3c4a6fbdf02d009afb8ee465013c5502327291071859be13ca6475de785788a764db00c87fc4bfc63bf2959e2d34d68a8", "e76b7ef74ac1a74457c4963679382bdd4d4c0713969b80d8ffb19336f6492f74", [0x9, 0x401]}) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 1982.523077] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1982.597084] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:51 executing program 3 (fault-call:10 fault-nth:9): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:23:51 executing program 2: pkey_alloc(0x0, 0x3) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000, r0) chdir(&(0x7f0000000000)='./file0\x00') mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) [ 1982.676735] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:51 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd900, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1982.842602] FAULT_INJECTION: forcing a failure. [ 1982.842602] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.886900] CPU: 1 PID: 2388 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1982.894057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.903425] Call Trace: [ 1982.906043] dump_stack+0x172/0x1f0 [ 1982.909726] should_fail.cold+0xa/0x1b [ 1982.913670] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1982.918794] ? lock_downgrade+0x810/0x810 [ 1982.922958] ? ___might_sleep+0x163/0x280 [ 1982.927132] __should_failslab+0x121/0x190 [ 1982.931404] should_failslab+0x9/0x14 [ 1982.935235] __kmalloc+0x2dc/0x740 [ 1982.938799] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1982.943873] ? atime_needs_update+0x491/0x5f0 [ 1982.948416] ? iter_file_splice_write+0x16e/0xbe0 [ 1982.953294] iter_file_splice_write+0x16e/0xbe0 [ 1982.957980] ? atime_needs_update+0x5f0/0x5f0 [ 1982.962504] ? generic_file_splice_read+0x53a/0x800 [ 1982.967537] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1982.972843] ? add_to_pipe+0x350/0x350 [ 1982.976763] ? rw_verify_area+0x118/0x360 [ 1982.980921] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1982.986217] direct_splice_actor+0x126/0x1a0 [ 1982.990650] splice_direct_to_actor+0x369/0x970 [ 1982.995346] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1983.000216] ? do_splice_to+0x190/0x190 [ 1983.004223] ? rw_verify_area+0x118/0x360 [ 1983.008392] do_splice_direct+0x1da/0x2a0 [ 1983.012588] ? splice_direct_to_actor+0x970/0x970 [ 1983.017456] ? rcu_read_lock_sched_held+0x110/0x130 [ 1983.022485] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1983.027257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1983.032812] ? __sb_start_write+0x1ac/0x360 [ 1983.037193] do_sendfile+0x597/0xd00 [ 1983.040933] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1983.046232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1983.051798] ? _copy_from_user+0xdd/0x150 [ 1983.056054] __x64_sys_sendfile64+0x15a/0x220 [ 1983.060604] ? __ia32_sys_sendfile+0x230/0x230 [ 1983.065234] ? do_syscall_64+0x26/0x610 [ 1983.069224] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1983.073828] ? trace_hardirqs_on+0x67/0x230 [ 1983.078183] do_syscall_64+0x103/0x610 [ 1983.082125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.087328] RIP: 0033:0x457e39 [ 1983.090537] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.109447] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1983.117175] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1983.124493] RDX: 0000000020000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1983.131782] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1983.139073] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1983.146372] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000003 13:23:51 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0x10, 0x0) 13:23:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x2, 0x0) 13:23:51 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) set_thread_area(&(0x7f0000000140)={0x24, 0x20001800, 0x1000, 0x10000, 0x0, 0xffffffffffffffb0, 0x2, 0x0, 0x7, 0x4}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x84000) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000001c0)={0x800000000000000, 0x5000, 0xf6, 0x4}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000100)=[0x0]) chown(&(0x7f0000000000)='./file0\x00', r1, r2) [ 1983.266009] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.271436] protocol 88fb is buggy, dev hsr_slave_1 [ 1983.277495] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.283098] protocol 88fb is buggy, dev hsr_slave_1 13:23:51 executing program 3 (fault-call:10 fault-nth:10): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1983.345877] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.351149] protocol 88fb is buggy, dev hsr_slave_1 [ 1983.356328] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.361410] protocol 88fb is buggy, dev hsr_slave_1 13:23:51 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xdd01, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:51 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x400d, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1983.537119] FAULT_INJECTION: forcing a failure. [ 1983.537119] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.575234] CPU: 0 PID: 2430 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1983.582364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.591713] Call Trace: [ 1983.594318] dump_stack+0x172/0x1f0 [ 1983.597966] should_fail.cold+0xa/0x1b [ 1983.601865] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1983.606979] ? lock_downgrade+0x810/0x810 [ 1983.611140] ? ___might_sleep+0x163/0x280 [ 1983.615301] __should_failslab+0x121/0x190 [ 1983.619548] should_failslab+0x9/0x14 [ 1983.623365] __kmalloc+0x2dc/0x740 [ 1983.626920] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1983.631941] ? atime_needs_update+0x491/0x5f0 [ 1983.636494] ? iter_file_splice_write+0x16e/0xbe0 [ 1983.641350] iter_file_splice_write+0x16e/0xbe0 [ 1983.646022] ? atime_needs_update+0x5f0/0x5f0 [ 1983.650523] ? generic_file_read_iter+0x112e/0x2870 [ 1983.655541] ? ext4_file_read_iter+0x183/0x3c0 [ 1983.660134] ? mark_held_locks+0xb1/0x100 [ 1983.664293] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1983.669077] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1983.673868] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1983.679168] ? retint_kernel+0x2d/0x2d [ 1983.683073] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1983.688010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1983.692777] ? retint_kernel+0x2d/0x2d [ 1983.696669] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1983.701951] direct_splice_actor+0x126/0x1a0 [ 1983.706376] splice_direct_to_actor+0x369/0x970 [ 1983.711084] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1983.715945] ? do_splice_to+0x190/0x190 [ 1983.719934] ? rw_verify_area+0x118/0x360 [ 1983.724112] do_splice_direct+0x1da/0x2a0 [ 1983.728273] ? splice_direct_to_actor+0x970/0x970 [ 1983.733127] ? rcu_read_lock_sched_held+0x110/0x130 [ 1983.738196] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1983.742953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1983.748582] ? __sb_start_write+0x1ac/0x360 [ 1983.752911] do_sendfile+0x597/0xd00 [ 1983.756642] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1983.761237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1983.766783] ? _copy_from_user+0xdd/0x150 [ 1983.770938] __x64_sys_sendfile64+0x15a/0x220 [ 1983.775451] ? __ia32_sys_sendfile+0x230/0x230 [ 1983.780049] ? do_syscall_64+0x26/0x610 [ 1983.784038] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1983.788633] ? trace_hardirqs_on+0x67/0x230 [ 1983.792978] do_syscall_64+0x103/0x610 [ 1983.796914] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.802136] RIP: 0033:0x457e39 [ 1983.805332] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.824239] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 13:23:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x5421, 0x0) 13:23:51 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) pipe2(&(0x7f0000000000), 0x0) [ 1983.831947] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1983.839215] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1983.846483] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1983.853751] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1983.861036] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 13:23:52 executing program 2: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x40) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = fcntl$getown(r0, 0x9) fallocate(r0, 0x4, 0x205c4742, 0x9fa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001780)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001880)=0xe8) getgroups(0x3, &(0x7f00000018c0)=[0xee00, 0x0, 0x0]) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000003040)=0x0) stat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000003140)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003180)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000003280)=0xffffffffffffffa4) getresgid(&(0x7f00000032c0), &(0x7f0000003300)=0x0, &(0x7f0000003340)) r11 = gettid() r12 = geteuid() r13 = getegid() sendmmsg$unix(r0, &(0x7f0000003680)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000140)="7162af40401f2a730e28ce0ff3e5d1ee890947a0fdfef3e3169a4c5dc0e21dabd60f3fb25ec56f85b4cbbeb917ba2daa3f12752fe431e309460cdff0d09d7d1e9fdba71241e4a198f5e0ad9183b1490d200726ce73008ba3b4daa5821809705a0de9c0bf4eff560ac9b88bf8ee846bb37c3c4d67eb93bd6b60ed450e14339d7f506b95c48f587544f318324fd311d7adc7ed041b0583c7cca4a11fc68b221fae19d916e34fd08749e3585566d3433a680a20ee3dea7ca1106c8c7f7df17cdffa44ff24fc556c2baf107087aeb65602ff2b3e74", 0xd3}, {&(0x7f0000000240)="42b965dd8224e46776759b26d6014b40671e6e17910816511ac05d83037c3d2d70d504b04bf9f5381fe98f4de527704f3b741de3cfa1f8a8ab7d03df981901c39dc5d7b7c06771080373741f98c0fdcba0ca32e8aa887122df5f1f389a9aa9e9c5f3105420b1c1fb1f4d75d5056c2af41ffe92c776f21b6ec4872040cf0553ec1911a64cc9950ef087958aeb0da7ca5a29f2fb9a69f2b91086de0d6ac5b14fafefa4f1edf91d18febb0fa4287adb757b1f804661bf49744e4ae89db1f9865f62ca6c037419d788193ad5bd", 0xcb}, {&(0x7f0000000340)="2f13e8b7688119a3d2879956fa1c393bc3de3201a18733587db6bc86c58a33eb8f2284e5836f", 0x26}, {&(0x7f0000000380)="80ba02c86f339df98a68f307147fcb067b2c0922ebf5f5334bf506b3698270f38f70386828a3e3888ce19fab05eb3e2f9a5af8a16db85ad6b3872351377eab1d1616a17b5419cfc326f880f82e0bc1e1f89fef13c76f7b728c2ddcb4f888e096cd18bfd1d157fb5bf7b237ca28542a9f3e8122e9825636aced50a75e", 0x7c}, {&(0x7f0000000400)="0f92d38f3694d215064f01eaaf43ef3f9a2b4136e9d0800f247d5f2739745cbc7bdfdf109fd18b0aa5bd3e3f8d47f82ad5d6bb5cee4c1d2476be35a470b0a710d846a9fb2119575f0d5984658d25518fe6f26ce9c344c33b6b01fbc04cb1069c89d1275bdde3b60326bbb79c920d0431ad42e1a63fbbdc873a19e9fbba2c7f22dde96a38c212f11f7e4c8ee5d3c87d56ec19000b6d5e34c3f66ecf5c0b3a6452ddde28f4f62606fa79fa1799a8d2300e93123e89127f0bf3b30fd6c5f8016cbf816a026518", 0xc5}, {&(0x7f0000000500)="d678c3f4b0d1b57027fd115aa19f506f3beed509f07fdcc217e4f8ca2d879b1e46b44693ba361c6c470c43b3e6a7d3a23bc215204f5c316b7cbafedea5ecff94631cc25457a97cc6fd2f7c62dc1cbc426541c31fce7ee5e7e746a9441582ea82d2c24337defadbcec57f535430379289d64588702838cf6a4cb535da9489e7c60d3cb146f89062680cf8931ed0278581542c58172c04176dfdab7a8d29934a172785", 0xa2}, {&(0x7f00000005c0)="1547148d1167b246ea8b805d", 0xc}, {&(0x7f0000000600)="37fb00bd423321ee11056d2b372abedae9b34a982198f80e603dee679a9ecdd4479212f2a537029dbc67e59326c1dad2d02411ed6c17b3e5dc864c360e61b1801bc17602952c6939a64bbacfd1e510774c2b5aea763ef1c7ef4c7b3ac55b5e4663f28931f0e200dacad43d4af9a4e1dd1e704be33d44ed1bb5237dcf693cbbf9fc3ca60ffcb745acdb8a8a5b2f1c62c1263b9a6105d7b2a04b5e46d547ea40148bd6549add13d0f7b6f6eb7f695dc2bc4dd9", 0xb2}, {&(0x7f00000006c0)="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", 0x1000}], 0x9, &(0x7f0000001900)=[@rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x38, 0x1, 0x1, [r1, r1, r0, r1, r0, r0, r0, r0, r1]}], 0x70, 0x10}, {&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001a00)="e3b104006ff8b0fedaadc51b9485f6d3bf9ea81606399ff5a42e065340e23e13be09a0276b01d29e70e8c69edaa3b9aab6c2b4bdcb891170ad3227da377d2589ef588de88942f9d890b788207d0f84e2e48f3f2e4edf72e3020c6a5ec6cb5a8edfd8fcb3c8facafdca9944ad9d63aad8b65b6250a894e8eb7131295e553b6d95cecfd4850b61d674cd4f6d8b983fb31ee6b4abacd0f60df0f10dcae2b1ad674727128527a94ef5a5c4a825218a4f93fc3cff512bdca7", 0xb6}, {&(0x7f0000001ac0)="85c8", 0x2}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="2c112ebecb45cdb5b31531414ad1e4b08824a04863946976c13fa72fa44c38236e6a0957359519aeb237b10748656206955f4c6c5ebede2cbb7a25716982a7365fab5d48dbde8c4f081a37bdb971e2b5aaccb1b53840ca6c22f197d733b7644389dc6b424981d6c1b2b34c74055c544632a50f90718260de0e28febfa102bb62d9577ce5af7ef0642ffc8fcf89bae3a54f4ec14c751973107d1bc9e5ada8ad3bac558dd5f46d54e9fd3c52dac2e3801fda9ea1b024b4a667b2f396f0a2e2a135bf3080110f9c9ad817a6b9", 0xcb}, {&(0x7f0000002c00)="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", 0xfd}, {&(0x7f0000002d00)="5f32ffc083c5e246ebb834dc1fb96154aa5841a3f4434873341f8146ddcd0529bc17939d870f8058ba5e3576b55a846f93e0fe13e90b5f2b91c5932d8106586ba01391d33a7cd04514eaa3865f20ef3dbfb61c7b3f46fe39aee0569305833e7e39eaf2be9099076929f791e79d3164609433d8d2", 0x74}, {&(0x7f0000002d80)="e6e6b9f5ba60ba712861cf8ab07fb5342e8b2e962cad7d7245b23a85998fea1972910ab9f9541b", 0x27}], 0x7, 0x0, 0x0, 0x44000}, {&(0x7f0000002e40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002ec0)="6597f90705ff062324d808ac8bb7257b94", 0x11}, {&(0x7f0000002f00)="d1590a0173f03d348baa19017c1f7713c0852b58f951246707c7c4c5ee11d92617a2fbc95d710d05c423525985c6af954cdfec9eb279f71cab1387dbafec50224101d638897ca63343d3aa1ab4c3aca97344faf9a702f06a5cbb83b13a4a2c8a75b365686c20727b7dd542b89b8851783e058e6e7ea0c40ec0069343b92a1d24e9f9a0604311e549186b1d2b915d69381e404657f900f01871024817147005f9d032d910e01d07f4", 0xa8}, {&(0x7f0000002fc0)="1a4b12d84ef26b680d068734af8a0977191ea337", 0x14}], 0x3, &(0x7f0000003380)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r0, r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xc8, 0x20000000}, {&(0x7f0000003480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003500)}, {&(0x7f0000003540)="6b2d7284ef3c02f6e3ca692de128c4fc3c3592d50f12", 0x16}, {&(0x7f0000003580)="719a68d5caedc2ffb8fdb32daa6b41b5346c332864bf0d23a7bbf22b78dc1ea912", 0x21}], 0x3, &(0x7f0000003600)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x60, 0x4000004}], 0x4, 0x4) 13:23:52 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="23001a1c5420004377681f5e010000009558386ce7fc57a6d4c176b763404a1c00ef58996214000000000000000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:23:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x5450, 0x0) 13:23:52 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xe600, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:52 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0x11, 0x0) 13:23:52 executing program 3 (fault-call:10 fault-nth:11): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:23:52 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x3, 0x4) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1984.454163] FAULT_INJECTION: forcing a failure. [ 1984.454163] name failslab, interval 1, probability 0, space 0, times 0 13:23:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x5451, 0x0) [ 1984.522722] CPU: 0 PID: 2556 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1984.529850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.529858] Call Trace: [ 1984.529888] dump_stack+0x172/0x1f0 [ 1984.529912] should_fail.cold+0xa/0x1b [ 1984.529944] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1984.529978] ? lock_downgrade+0x810/0x810 [ 1984.558761] ? ___might_sleep+0x163/0x280 [ 1984.562924] __should_failslab+0x121/0x190 [ 1984.567165] should_failslab+0x9/0x14 [ 1984.570970] __kmalloc+0x2dc/0x740 [ 1984.574530] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1984.579467] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1984.584487] ? atime_needs_update+0x491/0x5f0 [ 1984.584501] ? iter_file_splice_write+0x16e/0xbe0 [ 1984.584520] iter_file_splice_write+0x16e/0xbe0 [ 1984.584532] ? atime_needs_update+0x5f0/0x5f0 [ 1984.584559] ? generic_file_splice_read+0x53a/0x800 [ 1984.608025] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1984.613301] ? add_to_pipe+0x350/0x350 [ 1984.617204] ? retint_kernel+0x2d/0x2d [ 1984.621120] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1984.626398] direct_splice_actor+0x126/0x1a0 [ 1984.630810] splice_direct_to_actor+0x369/0x970 [ 1984.635479] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1984.640330] ? do_splice_to+0x190/0x190 [ 1984.644327] ? rw_verify_area+0x118/0x360 [ 1984.648516] do_splice_direct+0x1da/0x2a0 [ 1984.652668] ? splice_direct_to_actor+0x970/0x970 [ 1984.657518] ? rcu_read_lock_sched_held+0x110/0x130 [ 1984.662533] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1984.667290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.672830] ? __sb_start_write+0x1ac/0x360 [ 1984.677154] do_sendfile+0x597/0xd00 [ 1984.680881] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1984.685466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1984.691004] ? _copy_from_user+0xdd/0x150 [ 1984.695185] __x64_sys_sendfile64+0x15a/0x220 [ 1984.699684] ? __ia32_sys_sendfile+0x230/0x230 [ 1984.704266] ? do_syscall_64+0x26/0x610 [ 1984.708238] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1984.712820] ? trace_hardirqs_on+0x67/0x230 [ 1984.717149] do_syscall_64+0x103/0x610 [ 1984.721057] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1984.726249] RIP: 0033:0x457e39 [ 1984.729436] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.748330] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1984.756099] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1984.763378] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 13:23:52 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xea01, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:53 executing program 3 (fault-call:10 fault-nth:12): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1984.770643] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1984.777927] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1984.785193] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 13:23:53 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x8030, r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = dup(r0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000100)) rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f0000000080)={0x2d, 0x0, 0x200}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1984.897985] FAULT_INJECTION: forcing a failure. [ 1984.897985] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.964124] CPU: 0 PID: 2569 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1984.971250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.980601] Call Trace: [ 1984.983206] dump_stack+0x172/0x1f0 [ 1984.986842] should_fail.cold+0xa/0x1b [ 1984.990741] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1984.995850] ? lock_downgrade+0x810/0x810 [ 1985.000004] ? ___might_sleep+0x163/0x280 [ 1985.004169] __should_failslab+0x121/0x190 [ 1985.008411] should_failslab+0x9/0x14 [ 1985.012218] __kmalloc+0x2dc/0x740 [ 1985.015764] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1985.020800] ? atime_needs_update+0x491/0x5f0 [ 1985.025314] ? iter_file_splice_write+0x16e/0xbe0 [ 1985.030172] iter_file_splice_write+0x16e/0xbe0 [ 1985.034846] ? atime_needs_update+0x5f0/0x5f0 [ 1985.039370] ? generic_file_splice_read+0x53a/0x800 [ 1985.044399] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1985.049692] ? add_to_pipe+0x350/0x350 [ 1985.053601] ? rw_verify_area+0x118/0x360 [ 1985.057753] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1985.063078] direct_splice_actor+0x126/0x1a0 [ 1985.067496] splice_direct_to_actor+0x369/0x970 [ 1985.072179] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1985.077052] ? do_splice_to+0x190/0x190 [ 1985.081042] ? rw_verify_area+0x118/0x360 [ 1985.085224] do_splice_direct+0x1da/0x2a0 [ 1985.089385] ? splice_direct_to_actor+0x970/0x970 [ 1985.094236] ? rcu_read_lock_sched_held+0x110/0x130 [ 1985.099260] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1985.104020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.109587] ? __sb_start_write+0x1ac/0x360 [ 1985.113917] do_sendfile+0x597/0xd00 [ 1985.117656] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1985.122246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1985.127797] ? _copy_from_user+0xdd/0x150 [ 1985.131963] __x64_sys_sendfile64+0x15a/0x220 [ 1985.136480] ? __ia32_sys_sendfile+0x230/0x230 [ 1985.141077] ? do_syscall_64+0x26/0x610 [ 1985.145057] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1985.149659] ? trace_hardirqs_on+0x67/0x230 [ 1985.154015] do_syscall_64+0x103/0x610 [ 1985.157912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.163104] RIP: 0033:0x457e39 [ 1985.166303] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.185261] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1985.193205] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1985.200493] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1985.207779] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:23:53 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0x12, 0x0) [ 1985.215082] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1985.222360] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 13:23:53 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200080, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xd68) 13:23:54 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x10) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getgid() stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000340)="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", 0xfc, 0x7f}, {&(0x7f0000000440)="361b7ad9a00dfbc6d662d39220237766e8561a4c09347b7498eb8d7e2d677186812fda6f73a1b25935537fd3bf7fd31026185b62094e9ef851357c4bf2ee864535bc145a8dcb3ebe24c8a67a1bf0a2a54c77c66b56738e5117b6f4f722f907cbddbb91105e3a4c97ea665ebdc38bab8fb38252109a075e3271c43bd6a28776227de736c9a9b292", 0x87, 0x7}], 0x5000, &(0x7f0000000600)={[{@nointegrity='nointegrity'}, {@grpquota='grpquota'}, {@gid={'gid', 0x3d, r2}}, {@integrity='integrity'}, {@nodiscard='nodiscard'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@seclabel='seclabel'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x1}}, {@subj_role={'subj_role', 0x3d, 'security&'}}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:23:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x5452, 0x0) 13:23:54 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf300, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:54 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x8244, @rand_addr="eb58a0f40f575c148b7bb2be88f5b68d", 0x7}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x2}]}, &(0x7f00000000c0)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000180)="7346a9ae9af556e0aae67f80f6c13fd4ca8fb8b98a8754288f263f42242a8b58998ef74c9bb48a5523ac86984f1d75525030d8fdc179daff00986779e7b1d2a5fd97be793180a81a8dd6782862d37e6c229ba574b17f11129ac81ce6087074418e066db1c2cb3230d3e314cb4bdc953b4a8c4e1eca", 0x1}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x3f, 0x4, 0x5, 0x3f, r1}, 0x10) 13:23:54 executing program 3 (fault-call:10 fault-nth:13): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:23:54 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1985.802943] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1985.830870] FAT-fs (loop5): Filesystem has been set read-only [ 1985.894723] FAULT_INJECTION: forcing a failure. [ 1985.894723] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.934186] CPU: 0 PID: 2712 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1985.941330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.950688] Call Trace: [ 1985.953287] dump_stack+0x172/0x1f0 [ 1985.956941] should_fail.cold+0xa/0x1b [ 1985.960839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1985.965965] ? lock_downgrade+0x810/0x810 [ 1985.970130] ? ___might_sleep+0x163/0x280 [ 1985.974302] __should_failslab+0x121/0x190 [ 1985.978548] should_failslab+0x9/0x14 [ 1985.982381] __kmalloc+0x2dc/0x740 [ 1985.985931] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1985.990960] ? atime_needs_update+0x491/0x5f0 [ 1985.995458] ? iter_file_splice_write+0x16e/0xbe0 [ 1986.000309] iter_file_splice_write+0x16e/0xbe0 [ 1986.004985] ? atime_needs_update+0x5f0/0x5f0 [ 1986.009495] ? generic_file_splice_read+0x53a/0x800 [ 1986.014519] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1986.019806] ? add_to_pipe+0x350/0x350 [ 1986.023731] ? rw_verify_area+0x118/0x360 [ 1986.027881] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1986.033180] direct_splice_actor+0x126/0x1a0 [ 1986.037602] splice_direct_to_actor+0x369/0x970 [ 1986.042281] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1986.047147] ? do_splice_to+0x190/0x190 [ 1986.051128] ? rw_verify_area+0x118/0x360 [ 1986.055287] do_splice_direct+0x1da/0x2a0 [ 1986.059448] ? splice_direct_to_actor+0x970/0x970 [ 1986.064303] ? rcu_read_lock_sched_held+0x110/0x130 [ 1986.069323] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1986.074094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.079648] ? __sb_start_write+0x1ac/0x360 [ 1986.083977] do_sendfile+0x597/0xd00 [ 1986.087710] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1986.092306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1986.097858] ? _copy_from_user+0xdd/0x150 [ 1986.102019] __x64_sys_sendfile64+0x15a/0x220 [ 1986.106532] ? __ia32_sys_sendfile+0x230/0x230 [ 1986.111131] ? do_syscall_64+0x26/0x610 [ 1986.115133] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1986.119717] ? trace_hardirqs_on+0x67/0x230 [ 1986.124091] do_syscall_64+0x103/0x610 [ 1986.127988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1986.133188] RIP: 0033:0x457e39 [ 1986.136384] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1986.155312] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1986.163061] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1986.170363] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1986.177632] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1986.184918] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1986.192367] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 [ 1986.206003] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1986.234835] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:54 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x440000, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x5, 'syz0\x00'}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:23:54 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0x13, 0x0) [ 1986.297736] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:54 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf701, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x5460, 0x0) 13:23:54 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x20100, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x446210}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000027b97000fbdbdf250300002304000500080003003b000000"], 0x20}}, 0x20000010) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfff, 0x100) getsockname$inet6(r2, &(0x7f0000000040), &(0x7f0000000080)=0x1c) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket(0x1, 0x0, 0x7) 13:23:54 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "79328dc4b88253726d3419acf8fa0d958380410a"}, 0x15, 0x2) 13:23:55 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40840, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:23:55 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:55 executing program 3 (fault-call:10 fault-nth:14): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:23:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 13:23:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x1, @addr=0x972}, 0x8, 0x7a75, 0x8}) 13:23:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0xb00, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf0, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 1987.162455] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1987.188240] FAT-fs (loop5): Filesystem has been set read-only 13:23:55 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0x14, 0x0) [ 1987.256944] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1987.282524] FAULT_INJECTION: forcing a failure. [ 1987.282524] name failslab, interval 1, probability 0, space 0, times 0 13:23:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1987.308920] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1987.363699] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 1987.415448] CPU: 1 PID: 2857 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1987.422597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.431967] Call Trace: [ 1987.434584] dump_stack+0x172/0x1f0 [ 1987.438230] should_fail.cold+0xa/0x1b [ 1987.442152] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1987.447286] ? lock_downgrade+0x810/0x810 [ 1987.451455] ? ___might_sleep+0x163/0x280 [ 1987.455625] __should_failslab+0x121/0x190 [ 1987.459883] should_failslab+0x9/0x14 [ 1987.463720] __kmalloc+0x2dc/0x740 [ 1987.467309] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1987.472357] ? atime_needs_update+0x491/0x5f0 [ 1987.476870] ? iter_file_splice_write+0x16e/0xbe0 [ 1987.481734] iter_file_splice_write+0x16e/0xbe0 [ 1987.486428] ? atime_needs_update+0x5f0/0x5f0 [ 1987.490950] ? generic_file_splice_read+0x53a/0x800 [ 1987.495982] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1987.501279] ? add_to_pipe+0x350/0x350 [ 1987.505223] ? rw_verify_area+0x118/0x360 [ 1987.505238] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1987.505256] direct_splice_actor+0x126/0x1a0 [ 1987.505275] splice_direct_to_actor+0x369/0x970 [ 1987.514696] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1987.514720] ? do_splice_to+0x190/0x190 [ 1987.514754] ? rw_verify_area+0x118/0x360 [ 1987.514787] do_splice_direct+0x1da/0x2a0 [ 1987.541003] ? splice_direct_to_actor+0x970/0x970 [ 1987.545878] ? rcu_read_lock_sched_held+0x110/0x130 [ 1987.550910] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1987.555687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1987.561243] ? __sb_start_write+0x1ac/0x360 [ 1987.565584] do_sendfile+0x597/0xd00 [ 1987.569334] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1987.573934] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1987.579497] ? _copy_from_user+0xdd/0x150 [ 1987.583666] __x64_sys_sendfile64+0x15a/0x220 [ 1987.588189] ? __ia32_sys_sendfile+0x230/0x230 [ 1987.592789] ? do_syscall_64+0x26/0x610 [ 1987.596832] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1987.601448] ? trace_hardirqs_on+0x67/0x230 [ 1987.605786] do_syscall_64+0x103/0x610 [ 1987.609692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1987.614895] RIP: 0033:0x457e39 [ 1987.618108] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1987.637038] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1987.644770] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1987.652046] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1987.659337] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:23:55 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) membarrier(0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0xfffffffffffffffc, 0x1000, "38bfa54c5485bcc00ecbbd5c0d2f3d641525b66da667f9e914a5b5c396b0de2722fe7331952a9fa33692098170d65ea70c007b0d223c0274a2fed42091c0d27b5c9cffb5b764848e868894a1692c882e6499763691ce7c4e36cc8c5ea0c8cfe03854dc1a2d1d7be638b12f93386d20a169b862cab38d099c61b6016efb4b62a7437115c7cfcc2e3c03c3ae39565365cdd8fa39aede8cc26c133d6cc28eba52d7a03acf96635563669cac4927936555618ee745e245a760e4e8a03c77bf2105792227bf1e75e87acb3415889da42917eaebebf044d55144413b58272f1c56eae56443b00cbfc500dde96ea2eb98bd14d933c02cd24e3c3fb734bfa3cb8c53ae294e438b51089b117fd4a7ea09a31eb8525a6cc6de37edb55bf2eb9fc0edea0f913a36bdc904bde9e652226309fe8a4e09fdeb7000552ef219d5c456c104c349ccdb26ad74082fd286f4e409cff957e5bf8713ef264258c9d6aa1e6715a763130d00cda791f9e11baf1c0a0c9cdb4367089acd8e24032066e14593cf78c206ca8ad8ece347fc5a3b20497dcc16be557de9521f0eda9f51472c11ae6f73ce908e20522e9a3925e19110aeb245de1c282ab4e15db30ce8585853f76687da921a13def8c22f42ad4aa15b5918c816934573336b068467a9f0cc0c6697b995ff7acc55cd8155b60bd3a8f5e7069a65eaf120a9cb421f6208cbfc972930f7f52056e890ac654538413269fec3409368faf43c5ec0613451770c3712b2c700f738d10260bc1a68ebfd2af75a3cb2cfe17542942215e33a6aa7e7b0000f07bd707c038d2191db3d3154a55576b8eb1a4267b18c720a2f8c7f02c133bb094409c2f1f38c1d7e2d5f43abff19d8a2677a7544e4c72833b73b4ef9f3cb3054d2cea24cb96b89070dff234ea3c49d734e14404f20add68b54fa0583ffcfde1f1d9e5dd691d1da8652d4c53e23dfceb5a650d9a057bff2b9c9642c08a130c8dc3a11e5a6eb096308bd78e129643f910526fabf47b2bb7d975b8ce3d0b7e703125a86c361f6edb7a581ce5333d82dd0d015d00fe96548a54f07303442cd40bb3354c829203cc8c0e39bd882b86c31984473578b5b75b87677f2478ae0a116529effb85389006e5f86807fa939f2d76b273b65a42050bbed4bac5e3e3d426c32b364e1ec385f27f865c5effa2fa8c4996eb2f2552e90ddc0e1bdae8b6d935c8a365cb6a79615dadbb69680951a14410762f34dace1aa45e68a450c9630615a0bc4422868605476025ff080400be2d91e52b8dbcc2d9bc36875780e555241bc9961ca10190398ec89fc39c803345585c4c228ed98b5bc5059ee7579161e08fa8aec1dbbf83cb364c0c0615b5e0e23514cd2e8d6ec280df4a33197e17b0190458424d49fbcc6123d946a7aa2893d0bd83081de714519dfdf40d7b35b6ea47b053f7e40889fa077859ad4ea405515d3ddee6e7832e5524bf1aa1d96a7c1db11bf29fecb4ee9a56f54b139a735f5d582fd706a66154b98fd33da660ae7299a06fe3e02e1d1641feda5896ea1626a12e53854394dc9cbde5808f23b8528f8c52c40eec966a712ac1620892527f6efbed79220cacac4b09cd2749a3ceae7f8a15126f4cf62eb867ee30b0200f23109c127bc97bd93249daaf4778be5995a2727bce2e825102958cfbabd5443b2a962fba7b875857c0c78ca8f0bf7b889b8cbc568118e08ccebdf8c41dacf864eb8241637e09df2679300dc04dc9777fbb05451d953a61ea18b23a69497fbb131bb301ec52eb9d23914eedd74e9c9e9648026890ce9f84d203c48d7ebb96592ac799a928449bae5cf1928f6606a3f63391648f7469bba29805dd9d05baefa679578d0251aa2c450f98b969c61eceb0cc58a05adbd850fcbf12a764186b4d85b355e1b01c7d6cf53d3f1baca6892f5909fd5a43853a16ba80177ea08a719ec8e1307e164f7c4846221f10388648d987b6db2d690d529301f831d4db00a32fb1abb9321ea79bd4e2f34070cd63ad057ae5f316e4b2d5a6ffc9e7f5cfdd1eddd51d5948ad0ec55519b186557e9ac7a9e11f13e16f65831eed13b23a28da46bc18d381fd3e0066f74825679cc8ad228641592e5e9867142a4df1acff35452063b88f73cbb372bf7a65efa6db8bf69fc0c74bf860d71db5f9083e3521886cafde602b267b47b0fd1ac213bb8f1042844a7db0bc297a38d0e36d8a0c756dc5b202aa1be98246c48926ea3006d86e7c4fee091491179616a9ec799efb651a9daf55765af4fc81086ed07ed3c37445521c68b8cb7a303970606550fdc729232500267e0d1f4eb78164110e4dbe6c935f951368335d5e3f22320c350b10b9672dc15c640b06288598d45949735ceb64ae3e5980502e52e27e9b8c02f009927f97bc43ff810ca4354848293bdc66a5db505c4286279ce59b610da1fb7422b126e0a36a0c608e1fcee8878fcb995ecbf75023fa7ab7530c02506fa3fd76edcf7b095d42857469ca6114208003803b879e8cbdeecd5e21f63771a141db688523d737cbd40bf1d2181b42950e40c905b1ca891c2b670bb7d2c1c8d9ed9780c1a4533dff7caf69330d9ce832a009d6ba0a45ab8f398265113e9febfeeb10f2f23131b7fc0af114c792f3f8f247100aedd94c692a3debbe5d5d9d5fa7e3b2729840e2f0f87593705523687e1c1eb24290569f29c8f66a0f61aeb3114d16b9041b5b724e3f3b8ccfb06fbfd95e871bcdc48a8f85fc8228ccab60f45df9c1185c1ac103cffbc40ce641ee7f5feb80b9321ba638f8c7154deceb50296f5ef2a9534b07204cef2523c6a5b32517a953d41a946b376fba3b20d78df71d118b9987fd6e39ccaa8fd5a633f971a3ae3552a73df7ab33281ec828888b5e8d46cb2049fb760b54bd5a92fc2696df04fcd6baf351cdf3ceaed1bcf32fd3418d9e61821202f33e9c113534fef8f8f5e338c01202ff1d9a4175b440d5ddb7db64a11280a1b6d5ff5f761f37b8f620d4a15f6664dab7de8e27d178c346e9759ea0b9f1fa85453c6645ec379a690229a51e8a6a79f76e01b893673b76264fa9df5c396179a8cec7fe1c412c73124381b8634c482746bfdc89d7b23c48502dd7567669c5c8160722ef182edb62ed1dc93c69633e68a4dbd060232028a49f87167b5edfc53c8e806b3edb492f35125d3ba2e18d805d3067cfee56c56057688114d4d56723ee5ee4c40b8908cc2e363700038ff17ac50cd4e8d2e80af41035c486dbf04f2a3852a0d06742ef6c0e59352cc096c56ff6fca091516bb10fe0ba990c223002aed23f2612e4e46218ee1d813f923a051e2d1b70cefa9ec00bafec52050b4642dcbd88f0ce98939ec839c54f9818ff95212600dd3e747c1d54ec85eafc6856529131cd5feba5b5f3b584b5290190e145b842b39b0706ef6217ae9620e4fb7de87801fac91254e692e3eadf695d36b79ed96b5052d91da9ab8abee8238221946227592a48e10e31c3cd2d5d17b0db5f78a0d5d2f3d06f48426cc7114a6b568c1146e0eb3d2cb3511b95cc24e4ba8ef96afe877f1ed70a58a44f994473fbfec42e9439615bb3322c9600ed2728e0c4ae23ee3fac136f4381859ae4eae198046179b2832127a5eca2d3df00f687a2f63bdbcfe37a6e5719600a04a9fb3495463ff5b8194a47b7c1ae5ae623a7504c3139e95672ecc3815a549e9d39b59b785cb3b59e962a89aa9b952e95a1e3e5c3b8a97ba583fb709bf1b0a266e0c2509e256fbab57b1186e89321d6a051132cb9f1653d1d84939b53aa4497a0a8b4987a8f2f42c7da55b6c99318149706978f16c8244dfa8af1186363da9ad3b9b88744c1d7da1f7b1226522883b8e333a5190833710ac6f210f8c718efba871406d2b651855163262b1f6a265b8fdcc5d94aef79e0f68b4e5eecf5c02a9c91cc1bceb406b85ad49746470ce35b851751ecd63c6f3b0c55eae93de58af468de510b0e7f672e73fc0436df0277725ce87802a41e01679fe2676ef187c91ccb886e881cf2f1d5f1084e63e59d32529f4f170736e776d3b052f8811a260e970eb24eb4cc2521985dc7b557b0cf1a5310ccc370c5aef84e2e7aab7b035c9296993edb767ab1b3f7c3b3f834cbe7dee11cb0b025ef1134eadfa1b22bb2e8444431b75aea1f4eea04040f4cbaa670381c5d75be29e42aa4844d7fd34b14b1685323c483689c8a6d1b010b837bcfb106f292d4a8f950a0345709002058509ace35e8a5791ea1715e86023c94520c9e7d1c954f4c4d186397a74d9426b122164988632e72f6ce466d6268f886077141dc530e77713569057ba591c624ea2f54a69ed6340f856ef7d0c152657033da3c175eb1862b68cbe9dedfcf59cf08174e4ac9df2409b27e0aaa22ae80cda49bb4d8e4b297ad43329bfc6cc478875d3aefe5d69228939b0325aba577f9b454344c529497fbd9679580d345869d63d8c704509fee05a7b518ca007200b1abc310ffff66659a25532970fd8fb7a72e569bd557e8e5c6bbf4cb35412aa2e8fbf9d38486af2a655ebb364088c36a86fc104bf0d4d6a9973b59a240ee5a22d39a6cf5a05686f8c5b8692c4533e8c084f70407b161a9698396f997861fef0c8421b740e3cc94e649b895d892d68b9396d02fa5a6e304bd4df3d4b79782ea6f17e9ed8ac53e6e1f79b5f20d966abb5ce3f9ae7ad51c7736c830087a2aed55c50ce85b3c47d86f7219e9188d9268db98547678faf31bc1e5c59d0e1f2d7f2042f574de623d99ca96a4fd54a1e7fba0bdfcdfba9a5bef65867ea37c07494457315bcece6a2e4b6afdf40569c76250a7fb62e2e239cf30bb62f906e7e6fcbf47318ac442db4e76ad7866185bc32a21906468209d4aea0ccaeec42232562b46ee98061b03e3ce27f737fcdde2dc3209017dab6a062fe22b9551791a1ae057e8e69b1feeacef5653e5937d17f108aa8f0cd4de5eadb99846efb5c44c232ae03d079cb8b9c2fbe6a28e6a19b9861acc60ef90bebfd49f95380e5c3133c7e4c2a6ea9ae05176afddb3308a7b67e80f6c2bc05a42630eaee318523292d2428c6ab16bb6e05fb96f71d7af4bdfc190a8be71e655e56538f60a8dc104eb388a89ec287b082ca68317780fb1112202a561b6c4bcc469a6a6f4bbb60ce9199bcb9b1f4a5499440450fc66aeedecf7b40c7182eed61d6645ee1310bd11aefd797451a833b30d7b96bd2e411df2419e61c2c1b5dc8e910082eb81160855d1821886667d4cd011320cbc5223debf529c1764ce52881b571f6345f3d994ca1fdb97d11877e7810b21ffae527276b3913ad0afabb3ad6f73fef8a5a13fe641fb3b2220bb092c8fce70917f9db8febc79eb276594187fe4becb0f459843df8855260e74bb6be703c89cb8936926345263bafc6a186d96017186f09d7774b46cd7b5c51a28edc64ea3f4af68bef57a1127eb0c0e87c04371f0ade4677ad12b3132e2d95916b8ad8e6a779cb62cc2af640abd71012d6067bc11e85c5c29fa8cbcff0506ca3cf49133d4be57217c2329d5869f1b9951f5caa74882f27f2608edd5b61cf03e376ee8a3e2f5c18235fb802f2b8815f706ca73cc1783f491a04a1303c7deac70e040d61f7415def5292ae0aefaded6ba7e621e0accf0ec97083199553df6182eae12a9c96725ddcd743f4492be25356f43792fe2e3ee04297d933de9bc9812b7ac6afaeefa4831c3e427ed6ea80396f54aeca980e7ef1dec699a83ed809c1d8d80db0707fac9cef313c03b17852318eab6c46d64af32a2d87584bb85cb7dd5dcc2015421215033efe3cb6a47d9efa6d"}, 0x1008) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0xffffffffffffffff) flistxattr(r0, &(0x7f0000001140)=""/99, 0x63) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:23:55 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4020000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1987.666624] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1987.673920] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 [ 1987.683057] net_ratelimit: 20 callbacks suppressed [ 1987.683103] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.694457] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.701445] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.707999] protocol 88fb is buggy, dev hsr_slave_1 13:23:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 1987.714245] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.719716] protocol 88fb is buggy, dev hsr_slave_1 13:23:56 executing program 3 (fault-call:10 fault-nth:15): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1988.085377] FAULT_INJECTION: forcing a failure. [ 1988.085377] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.098749] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1988.107291] FAT-fs (loop5): Filesystem has been set read-only [ 1988.113484] CPU: 1 PID: 2893 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1988.120601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.129960] Call Trace: [ 1988.132574] dump_stack+0x172/0x1f0 [ 1988.136229] should_fail.cold+0xa/0x1b [ 1988.136252] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1988.136270] ? lock_downgrade+0x810/0x810 [ 1988.136293] ? ___might_sleep+0x163/0x280 [ 1988.136320] __should_failslab+0x121/0x190 [ 1988.136341] should_failslab+0x9/0x14 [ 1988.136357] __kmalloc+0x2dc/0x740 [ 1988.136375] ? iter_file_splice_write+0x16e/0xbe0 [ 1988.145367] iter_file_splice_write+0x16e/0xbe0 [ 1988.145382] ? atime_needs_update+0x5f0/0x5f0 [ 1988.145408] ? generic_file_splice_read+0x53a/0x800 [ 1988.184246] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1988.189772] ? add_to_pipe+0x350/0x350 [ 1988.193689] ? rw_verify_area+0x118/0x360 [ 1988.197876] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1988.203164] direct_splice_actor+0x126/0x1a0 [ 1988.207607] splice_direct_to_actor+0x369/0x970 [ 1988.212298] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1988.217162] ? do_splice_to+0x190/0x190 [ 1988.221164] ? rw_verify_area+0x118/0x360 [ 1988.225327] do_splice_direct+0x1da/0x2a0 [ 1988.229500] ? splice_direct_to_actor+0x970/0x970 [ 1988.234364] ? rcu_read_lock_sched_held+0x110/0x130 [ 1988.239396] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1988.239411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1988.239428] ? __sb_start_write+0x1ac/0x360 [ 1988.239446] do_sendfile+0x597/0xd00 [ 1988.239472] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1988.239493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1988.239511] ? _copy_from_user+0xdd/0x150 [ 1988.254120] __x64_sys_sendfile64+0x15a/0x220 [ 1988.276596] ? __ia32_sys_sendfile+0x230/0x230 [ 1988.281198] ? do_syscall_64+0x26/0x610 [ 1988.285191] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1988.289790] ? trace_hardirqs_on+0x67/0x230 [ 1988.294134] do_syscall_64+0x103/0x610 [ 1988.298039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1988.303250] RIP: 0033:0x457e39 [ 1988.306477] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1988.325396] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 13:23:56 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)=':^\x00', 0x3, 0x3) 13:23:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 13:23:56 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000000c0)={0x0, r1, 0x1}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:23:56 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget$private(0x0, 0x3, 0x10) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/53) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 1988.333129] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1988.340434] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1988.347713] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1988.354997] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1988.362276] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 [ 1988.371360] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:56 executing program 3 (fault-call:10 fault-nth:16): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:23:56 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000000)=@generic={0x1f, "3b0df27c9b8869a61c9c8b6b74ed151d90db72f764ce20299b19cf8b72fbd03f0ee2150e38037999707872c3d6e8a9b327a9b857f881e6ae47d78e99bef8d23c2e9fc7dbee0c099fd6297bccab2f4ab70103859d689a7f0ebd008f66e275e1fc2dcb89a5ae32d0421529e456896aee0f55aec484cb0ac2d81806f70d8101"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000080)="d65830c0061e6d137c91bbe722021ffa24f1b0cc9a24f6ea976ab39f009243da5b4bb595134401c8b60daf5bdc5427fb724a691a8adc359d5dc899d00d680ee5a02ccfd711603fca778e025a06beb9ea5ad47746769685775522f8c0fb7230c3eeb1c8ed0c4518a47bfb6260e6b7a2c37c7429b6540004aeb6764551a3106967cea393c94b102c8e8c258d04c38f6dab4ae58c42fec57947fff3a414077e1eb9ce5934d1049f89a40ebbcf13f39ec6e508c7b962ea0617b5343b1531c4b7c9d9f5d4e249f5b2553886da1be824cedca9b689db78b085f80a289cbaf8ba3b1a99d87dc91c6af0e79c26d83f52b8402114b4880288c57aa727139569ac85e8888d5f4e4d363c9ec8b4e6b2051edfa0d0d38c56919f15b4e90522fa8399adbcaa5ed22eb389a4a8d4676a4407a3d13c96f553ae7c43407f8bd713aa37dce235a0e0572a28c7e6abf278af73cbd8ce4a1fb2623e273db25bdfe97c47b729e9161b0ce8b11559b562e2037a00c806c6dd4829189c79562f64bf9c884da125249b04b27dcf5d7e139146b4d87dac351542e31ada5412642cb19d7b45f0a15d660cd7c372d073a6c33efb9060797869331759a15426d40e5fcf33dd8da33fbb8cc0d98f37ad09e3601dfb6f74c01c86f25fb67c1b527c232c70022fe01886e82332c159453ff281944d11637f15b1d88996ad12fea79ef2b783bf730f21a87f609a552f4db8029bf83eed6afefb3e1dd42ea1e085e034fb7d142d6173df85424d7f67acc1986031763f30b5b151453a9bb14247c66cadc246a5373a49df2503d09cc63ca3857ebf596a64e2607d98473291f925ab62ec00dfeda200fab014292acbebf50a93ff2d5b1f6e5c7b372eda2b091040fe997eaf7eab4d7a6e2da0c99909b8a375ce328c9b312d76aa37a87e7a4c9676fde7e9e85b482ea47d714dba9e23288347aa2b23c46b7b1409484ba71c1ff63298e917ea3d48b651b2583974dc63db48531d13e1547873afd8f00425722f83560360645de465cbb1e6b912c0965cc7841faf1bc83358fe8f546e1d497890de0c3fd282f0470e941157232ab957a74f7c6b3278a2914128cd2ede359c1d27805df7071aeca210f321a6132d03d49d0796b4672929aed24db33c8fc7aa102a281e359d1010b76f4959526c4a0076b54a1bc5908918b22e415d128932dd44f1b17bc4a60e443901927877ca2a1d30ba1e5973f898299ea8a288b2ffcff3cafa9f774c9c3215e244259157ffd1dc97d567e36eb22222585213b7be75d171062ffe0b51f212730b26084020e2148bb31b2ceea025aed0934ec1dd17494a1c04bdd68bc26ee7dd7ea455f85cc17134bd382cdfe3ae43cc4d204c30527b5e0051248df3e5cc7343451315fcfd7a1628c076e2002561df77ef2b1aa42f93ef27037977a1d831134779d1d44480f5cc84564f5450dcb279452f439ef48acf8d5dd0b049a3a24040d872c51eb5716d99c25cf7b6b70b00ea7b0a9d8067e1c39a20638a1923e8318a569ab0012eccc377eaddd2836e5e271ea55dc9d2c86f0444d39623c748c26382419c72a1507fbb0892789921fe33c6420782276c9073b6e7ff4cd29aa33aa8f4153ecb0a156737421c7232a76110accea85413fad7e29c3a6c8dd91d2d501c7569c78f8d5c97e479a10ecc6ca291d0b16bdd700869beb929471cad40d7508d258ebd354ebb8e2b7374e8f0b2e11ec29c42fded00d0308b9b9c3dce782b78615ec1789a9aba5ef244f8090ac703c217580f74728ac034a6f8907556eddfe80f493ac01ecf97167c4d8d4b2bfdbf4b0454d8b3f5e5dd8dcb9de8a44c81ec39f49db68ee594504dc44369c1acf99cc0b5219551e575f7a675920cf1e04dba176f5ecfe1d64f6721f484307d2a0f39d204f9beae9840569de90cf07abbdec240e11866b3f1da2aec9abd9b7be5a0337a3a061482c440cf2eb45725b9f8f718054eb3e417764813a4a1b9bc9c53684f0b64d1a3e88b7f46a42fe152469b50ddfe20bc85179e6d4d442d9cb022d7f4e2bdd935279709eda0e5c9c1bd93bf4730489f15eb6d6fe87f34e9d75a013b06b3d0e8b7c33660be00bb5d1f3d6f8768fe7d50d77f87237e57cf01673372a5b1e7dd9b84b6148b52592f2f644a27081519f5d48a64357db3aaa24931ababa1458e0497dfdd8981fbe7e16099524a21b6c02e32e2d37c08ed429ffeff5b20d02c659a7cc0ead6da15e6ccacc5958d4fa0de6934f967a966e17271bc9e5383d3e1731bf7e74efbfb7a7efa111b88aaf4cbe76be64c738f83ddc04c696e633fce0bbb75b92647a951e665fa79f78e4cc4894274bb1378daa17ab13dc876b41d70b00319f0c9bd8198dd2ad73ec11c46b677518095ba6b54e9b94b091c19be24c909af041dc61a4fea67dd51880132d4ea20b746401ad19a38596c5bee5c3957b4be7af78aa79812d9ff5c351be8232c9cde415bc5fef58f40752638fd7a917016e878aa4cf92c9382fb61f4096ef50d8fd3010453044c45a1e7e93da9d1731794aaa7eaa74068d53de67164cc904d58eb79951b2a259d13d73c8a1254d48142fc03d582ca75e0c17dd91dcd3b9b3d2a99fca4c7f93e3884719474d910a4ce9f555262f6c2436dd9332716186a4c13aa70b3c9826531a76ccb9390fb479e67b3a8b416ecbfbeff6875616a8be95112afc1bb45af126fb42d3ea2332a3ee2b93a466149f89650645e4f982026d0d468946a2ac87378c0aa93d1ffff1e5b6f3e4755ef4a567a54690494405635160c937a028c4a901d83790c291554770e247c17741e9bf14c549d95da088821b31416324fcdc3c8aa6fbe0e5beda4fdefd7847795ebeaa52d68e6800e871a551a4fc02dc1f3e79966d211cb01cf3f8e90b990cd017290db397a9b553341cdb3fe6664325ec5f347ff92aed7bdbd1a5a3b2691885f9f497ed3ee5cfdd1d8f7e831924309abfa81255a4afd0340d5a81f356e0ee3db80da3f4baf52c3d7cac4a33d5bccd6b56f4737812779ea8ddec95f4a15f8b4efffb8606243bb2868b274f09499e9896a68e249ce933b0856b700688b4572e2dc2656c26ffd468f43256ee0efd47008da25cb7ef1fdfacb40c209dcc524583c75dd45bf5ac6bba60d4ff9113ae31933133d5a30a2ede3ece1548cc0a3794c6285be0104b7652dcbf28f0fcd6f9c7141a1b6925605c42f3e0f8b465198673186e252e7b49268f057ec85c4e3be0c1e3befe66c806099bcd03a5a91366ed8748a3770f8045f8121fc33de20c88fc38d7bedb8b8d1f60a14d3af9f9dbb0f38be19f0d8bc7dee97a587d71af336425e522e67a0fb0f7dc87d9d73f710f562c3025af124a5cd1f87dd7ffea2c9b28e2a7b9db6dd852d4397f5f3aac0086d74b07260815d59ee77e9fcb7d1fe4295ef976ee42d851ae28600569265f2c5c9c416dce68c3febadbfae55b9e173843b04c96f0cde80ee4f00a782b724b7fe7f84be73c55a3d1c8dc25fd72df256da7329d8cec8ef3f60abf1013287399d4b41afa297c2e72a291aefa256584d4be07612b5290d1ecb6d14746c926b6d26ba4db028d7b8a2ebae28a76a237ed62fb2162600fc9bb0abc55f743dfbc256eba41f52fd53732b393de7d4ca9d5011918fa7430252771682011588d88d4b1187562eed0cda019988aa052694a0efdb38c050cf256a0de6b4a167edada501757b17e20ec7d6e71a5246287764498c248d4d2a4522f1c44ed9bd0c9f3053df4e3d31596b1ef77d0f46b9bea7deed2835787307d4d8e3d02574a4598125c1ba74eb597dbb8020cd847703edd0e2fe276a5cdaf75c081f88e10d6546f7bcb2968e8a93b9a912ac4b8cb8c039fe536b5982e85a3cdb50952935a2749db43c4a640bbcb52489218dbec7a7a0c3eeac299a39ae8edfdb992b022bc973f8ae2baaac104eb46cbb84980534748edd11bafbd590dc06a9212030b2dd6d699f25a1366340e00b773a7e3c7279f66a1f2530e3091150fcdf036c3066b1856adfd5b8b77ea59d5133218f65d8351886b87ab5a480da2055c5cb5e4d7cb82bdfb0ca55d2af7a228959b800ab4d60cd6933cfdd049187395ed6ee2c02c5ce87d2a7c2343484e6b6c4bb03b9ad293446dd1d8dc02c86bd6e05c11cf99ae536c718afc9bcb29cc8d233833f93f2d4a9e2f293f127ad98d567229cdc0eae886e7f8680b64e80721f7b513dba5f6210ac86da84cdd53bb038573c21e425b0622912e603d1f447161a8a56cfed4db116868e91ec87b1f31b634e51a4bcf706bb43e28926c3443e8f8dfe7852f5b87fb741167633a704e48c209489b9352b90778622c48f8593721f8c8e5c8b6895e68beff9fb2cfefdcf29b91b54355009462bb2d9a15c2158b71da75c91ac819a2e1791dba059812b1104ca851463e94b9d83a4a32cfa240d2111a7946e05eea217f0676653871aedd4a9df2d38af59b59c5cf9252ddd71cb9f5b7d2c58b1d341a02dfe0b6ea7715f854615765d08be5631c3ab355c66f61b0b3d0d139df2cdf7fb336ee0cd3e4369ab8ed4892203a8aaa0d8894b4adf4096292214ec4a3063b2f5c9dbb5a8fee4ffdba4ff6ca69660ac23b0e96a9279b520b48aee69b1a840dba2bfa9e2d08de2be1c7c8e8d912ba8d11ed78b2be71212486c6807bccb0d24ddc58a3246d05a09c16ca9ec68f5d45b144061c4a75d6eef599a7316b44e33cbe2761d30465cc3e2f0edf408e7cb37dbfdbf1b2e6497b0684961dae56e40de56dec70ed3529d8f084bf3f1cb353c6c46ac9d59e105d44f852bd721537ff2d0e88150d1f832803eb420e2b1eeae3e90251f54f45ed00679295050148aeba4732d962716526345530e54d5b1ab7a0b5c1e04a851b368eb435f28de2ae467a97f97232e67dc31eed71b9a9be65e62d968511b73b35e4d919794161926b05ee2db0454f800a6f27f1abd4528b05c73c3385c6677c450ae5d6a321984c25ac428a9500dd558f7c788203ae1a772f8f32acea2dac1d887c192994a955be44fc211d1be9aa5c8b97ebed83ac0e141d02958a81bd3663409b9c687a989338b253da5b034be25ede79f2b2a442b09d2ca53d532587c449f30164a2db72906077f5fb6b8858d1345aabf511e615b64c4293712fdd65c990af15c7960d447da80f044883224c664de7058387b536ab8f8b6dc3827fb79f9d7f4bcc105d227406f404b39a6260caa44ee59fd0577f87a0930df20f57d74c1daf0f3c066abc5727c0e3c278df74d1c3a2d54c26c6f702da9b0f8cb93ca34a7d30a082c12e43cac437bcd67c70b680bda19b2d5ab8468c0f853e90d3b90a0b0f126d4d0f0e55da1a6dcb524977afc9476d0be55cfc9b75f9938b8cce7ff82d1818d542d7e3b451fb48696e6f7c69d0d2fb95400d502f623306d72c5b97c5f732f13035eff6f63e3f52e1a59bb5a119c42eab2b8ab87842e33f8cbd4055d576e0f587a19e04bf8b5f73b7cfc160efb3bee8200a42cecd4a69495118b5e89a3649f7092d16367cec46b80f44437da9ce7cc51c2b7832240f1c6e9e518e34765272886cdc727d4edddcfac041004097297291d507fa4f5bf1b48560b8215a3e527d9a8850a654ed8d35f7770bd77d34583942c8d83c8b19fb73eb24ba96d3994a6fd3f01a3489847928028a2c8b3141b06a0058b46e132c7ee9bf1b95e8de65f5d6aab1f2cfefcd47c4ae4f85c3ad1b7b603556b27de45bb0f4c21e811439b234e47debb02b5f8a8e24300e238640b2ee9adb37b2c4919d72b7e175ffe371339516c7d4aeb94ec1c1dd48e504dc90e755f1921921d", 0x1000}, {&(0x7f0000001080)="143f68f152b622d2d6ecf0481cebc40b4789f82174251233b066d7e09a53c2f26aaeeb664a9ff0cfd4c3b0149aefc147b9f656a6e249f92f6c1d1d2e6b0c24480f9495d99c600a41d1f1851849600c55cc16048e964da16d530ec8b1f80b52dec0a723823768804e11c73f677e37cdfcc79aa80cc307a2b72ad198faa46bc1b29dfc978a6d93d46c4f74f1a6ed57108c20a7823b7dce339d", 0x98}, {&(0x7f0000001140)="777cf7b2503f485d60cac42d0df2fb5cc691180872362ee62a60849991a44bc4a824a3f776dead2904eddaaf9392a6f615d2d3a4b7371d8948750890b75d7c9ca12871252651923ccb750299b201f4b6df8e1086c51a", 0x56}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="1e146b1e52f66ffcac1470bd9c8bdd6abe6785edf1830379e63ff1f48d89cdb3b648a7ab4517e6a224a48042c50874a7e4b43ebb055fd698e2a7f044d25e103dfeff8d17b0ea9de5e57827681c605fa86c5e7f217b2edb70083d3eaeef95f772a783bba33ec3d0e53b89c4e1d993f4a5107cab88e192440308d6fc231f984664bc3c94c8e4946a0b74905cab336b4dab06579b636a5d0b3a851e1ef1dbc14830", 0xa0}, {&(0x7f00000012c0)="36a9290f970152098d9b1fc4335bc6f9e51d9e51e58f20ec4d6d65d336c437104cdc6a87d824bb8c39693f0469c16a4dd1ce0e737ccad6561de77cc11f3228be337ade84725bf5ea6933b6af9c37b59c7e3fe9c0b8b7a77935057f8a1e9f52077ffcc0c1d875600b60aa0d0d69fd89c08b4b51f24479f7f8691ad75d9520c1bcf115d0c8be893360da05d024f002fd2762adfa108e8568a5627a2913a3909167ba", 0xa1}, {&(0x7f0000001380)="adc460bf50430a714a8e6a7cd80345d6b903b90677b5e56ed508867f123f9773738447a63001a5b7c949947404c02988db2dc482e656fea6275577548c233455366eb6c1626ebf8816387feda862d356b2c46ae7028e7c647c172474cacf7682534a1ab4f78e3ccc8a01acbeba800a36656318569723e8c1", 0x78}, {&(0x7f0000001400)="8eaadd28f12fa536436e84d6e522488c7778ca1338839fbe6399fd70e2bc94930347753ad02519c76de08b7b502d6fa61a6521d1ee1092027825e601ea4d0f4e0b13fb379b11f80004daffc9ad98119aafce1015c8330ea34736c12ea79f0e494d69b0ee4869222621", 0x69}, {&(0x7f00000018c0)="86f027c7b8d2c4e8747ff6a7bda94f0e60dc4e7e99c88a1f2036e018a471d87cc2c6a485474648f8d63ec86bac3e774daa905ef989cfce734283ce7376a302934f2d3c8e737196431159b3753c34b9cf586d12f040b91ca6ccad80ad0647efcba68bdb933259ebf9cd37de5ffa94c07efc8615c5979d93ffb93c2bebd20363ee25d0da9746f0f8aae68a9188c9a38c85af740ebd4ffc7d50f071ef28fa302b188dd1ae32f26f3d212cfa05a15a6306cb3aa15fdc545b0d351fad14fb6a97044a1ce9132ff76da58074564438b849a1d3ab0b6610ddc38e3069f0639b8f1344ab354513083429b24c1c2a31e44d723fd30071cf21", 0xf4}, {&(0x7f0000001580)="97eeecef9bddb075c698680a5b1a1b78236b13407844087a1813b819e6fb33b1485ad075e010f05fffab9891eafcd9b24bd8d8dd5a4daaf163", 0x39}], 0xa, &(0x7f0000001680)}, 0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1988.443556] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1988.524767] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:56 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x8000, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x18500) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 13:23:57 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x9000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 1988.747828] FAULT_INJECTION: forcing a failure. [ 1988.747828] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.806228] CPU: 0 PID: 3011 Comm: syz-executor3 Not tainted 5.0.0-rc5+ #61 [ 1988.813358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.822706] Call Trace: [ 1988.825302] dump_stack+0x172/0x1f0 [ 1988.828938] should_fail.cold+0xa/0x1b [ 1988.832830] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1988.837939] ? __should_failslab+0x87/0x190 [ 1988.842267] __should_failslab+0x121/0x190 [ 1988.846518] should_failslab+0x9/0x14 [ 1988.850356] __kmalloc+0x2dc/0x740 [ 1988.853895] ? iter_file_splice_write+0xab/0xbe0 [ 1988.858645] ? iter_file_splice_write+0x16e/0xbe0 [ 1988.863501] iter_file_splice_write+0x16e/0xbe0 [ 1988.868201] ? atime_needs_update+0x5f0/0x5f0 [ 1988.872704] ? generic_file_splice_read+0x53a/0x800 [ 1988.877809] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1988.883090] ? add_to_pipe+0x350/0x350 [ 1988.886974] ? retint_kernel+0x2d/0x2d [ 1988.890883] ? rw_verify_area+0x118/0x360 [ 1988.895024] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 1988.900304] direct_splice_actor+0x126/0x1a0 [ 1988.904743] splice_direct_to_actor+0x369/0x970 [ 1988.909418] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1988.914266] ? do_splice_to+0x190/0x190 [ 1988.918245] ? rw_verify_area+0x118/0x360 [ 1988.922394] do_splice_direct+0x1da/0x2a0 [ 1988.926545] ? splice_direct_to_actor+0x970/0x970 [ 1988.931393] ? rcu_read_lock_sched_held+0x110/0x130 [ 1988.936405] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 1988.941161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1988.946716] ? __sb_start_write+0x1ac/0x360 [ 1988.951068] do_sendfile+0x597/0xd00 [ 1988.954825] ? do_compat_pwritev64+0x1c0/0x1c0 [ 1988.959427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1988.964959] ? _copy_from_user+0xdd/0x150 [ 1988.969129] __x64_sys_sendfile64+0x15a/0x220 [ 1988.973638] ? __ia32_sys_sendfile+0x230/0x230 [ 1988.978235] ? do_syscall_64+0x26/0x610 [ 1988.982212] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1988.986811] ? trace_hardirqs_on+0x67/0x230 [ 1988.991133] do_syscall_64+0x103/0x610 [ 1988.995025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1989.000209] RIP: 0033:0x457e39 [ 1989.003405] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1989.022330] RSP: 002b:00007f3e12feec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1989.030133] RAX: ffffffffffffffda RBX: 00007f3e12feec90 RCX: 0000000000457e39 [ 1989.037397] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1989.044669] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:23:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) [ 1989.051932] R10: 00008080fffffffe R11: 0000000000000246 R12: 00007f3e12fef6d4 [ 1989.059195] R13: 00000000004c4df2 R14: 00000000004d8a60 R15: 0000000000000005 [ 1989.067434] protocol 88fb is buggy, dev hsr_slave_0 [ 1989.073064] protocol 88fb is buggy, dev hsr_slave_1 [ 1989.172919] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="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") [ 1989.222996] FAT-fs (loop5): Filesystem has been set read-only [ 1989.266514] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:57 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget(0x1, 0x0, 0x4) semctl$GETNCNT(r0, 0x5, 0xe, 0x0) 13:23:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1989.377678] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1989.418642] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:57 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1989.506099] protocol 88fb is buggy, dev hsr_slave_0 [ 1989.511625] protocol 88fb is buggy, dev hsr_slave_1 13:23:58 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1ff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:23:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 13:23:58 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a5243779024681fd9649d02df9b632b308e39c6025e01003c1e2200415b882673133cb41e19a6160f029a26ebf65b14fdc41f2aac6443604e271b08a845396969218d9fcadce571587503fe1347485e302a8f70fd09e8bdcd43ad187a30fdb66f32494033133ef4b650d2ecb1265dc44f170d20faac6c21d214986ac9ca808389e674222d9e7e34ac31b4a42758635ac9be3345b30ee386ed7f4e3ed4d59138d66de702434d22fdd4"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:23:58 executing program 2: pkey_alloc(0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x28000, 0x8) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, r0) pkey_alloc(0x0, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1989.841964] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1989.870455] FAT-fs (loop5): Filesystem has been set read-only [ 1989.903843] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:58 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0xfdfdffff, "461ad8b63711e2c6d9105c06437daad0f784c2f0fee227b177dbb519dcbe30bcce282eb3e3f939e9e923037d5201d162b3917dc9301842bc111b61b6a925d6c5e263b416718b968dbcb9b85a53e4f83a4aeea179091a23d3ded7568614bc5b68a491041d35abfbfca3c0157f9a5551f5d82935682230f0d8a72f42b0da2cda9e"}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000040)) [ 1989.977329] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:58 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x414000, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x9, 0x8}) [ 1990.059824] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:58 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:58 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2f, 0x0) mq_timedsend(r0, &(0x7f0000000040)="e1768801335d7d4f6c5e2b1a25617e0cf43590a405496181a6cf537fb08fcad66ac31b2474a8a584ca0ffa", 0x2b, 0x2, &(0x7f0000000080)) 13:23:58 executing program 4: semget$private(0x0, 0x1, 0x4) r0 = semget$private(0x0, 0x2, 0x200) semop(r0, &(0x7f0000000080), 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xc90, 0x42140) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0xf9, 0x0, [0x8001, 0x1, 0x8001, 0x1]}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x9) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x0, 0x5, {0x100000000, 0x4, 0x11d, 0x100000001}}, 0x20) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:23:58 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rfcomm\x00') ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7, 0x100000000, &(0x7f0000000040)=0x80000000}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1990.390887] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1990.457152] FAT-fs (loop5): Filesystem has been set read-only [ 1990.470737] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1990.529939] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1990.591666] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:59 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:23:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 13:23:59 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget(0x1, 0x0, 0x0) rt_sigreturn() semctl$GETNCNT(r0, 0x0, 0xe, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000200)=0xdb4, &(0x7f0000000240)=0x4) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/172) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x8000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000000c0)=""/68) 13:23:59 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/109) 13:23:59 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a52437768010000000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = getegid() r3 = getegid() stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x4, &(0x7f0000000380)=[r2, r3, r4, r5]) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:23:59 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfffffff, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:23:59 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x44800) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000000c0)={[], 0x68, 0x6, 0x101, 0x0, 0xe, 0x0, 0x5000, [], 0x667}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040), 0x4) 13:23:59 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x80000}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000080007000800090009000700050001000100080024e29bacf083a909a59e85db7e1c734000f7f35b60ade20325"], &(0x7f00000000c0)=0x18) 13:23:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 1990.949206] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1990.985991] FAT-fs (loop5): Filesystem has been set read-only [ 1991.035423] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:23:59 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) [ 1991.080109] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1991.149331] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:23:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 13:23:59 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1991.434023] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1991.466279] FAT-fs (loop5): Filesystem has been set read-only [ 1991.528534] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1991.588903] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1991.662953] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:00 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:00 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x28000, 0x0) connect$nfc_llcp(r0, &(0x7f00000005c0)={0x27, 0x1, 0x1, 0x5, 0xffffffffffffd247, 0x3, "5af9f0df04bdb6b8e803687b867323341570f39907a806468fd400728209e5c8da13751a9ee477648d0cec16af0c7a5d8b8a3754e6686e33cdf2ca427f0b3e", 0x23}, 0x60) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000018c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a80)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001b00)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b40)={0x0, @broadcast}, &(0x7f0000001b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002f00)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000003000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000003080)={'nr0\x00', 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000440)=""/96, &(0x7f00000004c0)=0x60) getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000030c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000031c0)=0xe8) recvmsg(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003240)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003480)=[{&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000003380)=""/201, 0xc9}], 0x2, &(0x7f00000034c0)=""/29, 0x1d}, 0x2000) ioctl$RTC_WIE_OFF(r0, 0x7010) recvmmsg(0xffffffffffffff9c, &(0x7f0000009ec0)=[{{&(0x7f0000003640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004780)=[{&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/107, 0x6b}, {&(0x7f0000004740)=""/52, 0x34}], 0x3, &(0x7f00000047c0)=""/202, 0xca}, 0x7}, {{&(0x7f00000048c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004940)=""/170, 0xaa}, {&(0x7f0000004a00)=""/88, 0x58}, {&(0x7f0000004a80)=""/201, 0xc9}, {&(0x7f0000004b80)=""/56, 0x38}], 0x4}, 0xfffffffffffff800}, {{&(0x7f0000004c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004c80)=""/4096, 0x1000}], 0x1}, 0x1000}, {{&(0x7f0000005cc0)=@rc, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/229, 0xe5}], 0x2, &(0x7f0000006e80)=""/180, 0xb4}, 0x100000000}, {{&(0x7f0000006f40)=@ipx, 0x80, &(0x7f00000070c0)=[{&(0x7f0000006fc0)=""/116, 0x74}, {&(0x7f0000007040)=""/122, 0x7a}], 0x2, &(0x7f0000007100)=""/58, 0x3a}, 0x2}, {{&(0x7f0000007140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000008380)=[{&(0x7f00000071c0)=""/4096, 0x1000}, {&(0x7f00000081c0)=""/160, 0xa0}, {&(0x7f0000008280)=""/197, 0xc5}], 0x3, &(0x7f00000083c0)=""/209, 0xd1}}, {{&(0x7f00000084c0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000097c0)=[{&(0x7f0000008540)=""/4096, 0x1000}, {&(0x7f0000009540)=""/84, 0x54}, {&(0x7f00000095c0)=""/20, 0x14}, {&(0x7f0000009600)=""/164, 0xa4}, {&(0x7f00000096c0)=""/205, 0xcd}], 0x5, &(0x7f0000009840)=""/200, 0xc8}, 0x9}, {{0x0, 0x0, &(0x7f0000009d80)=[{&(0x7f0000009940)=""/237, 0xed}, {&(0x7f0000009a40)=""/246, 0xf6}, {&(0x7f0000009b40)=""/21, 0x15}, {&(0x7f0000009b80)=""/126, 0x7e}, {&(0x7f0000009c00)=""/243, 0xf3}, {&(0x7f0000009d00)=""/107, 0x6b}], 0x6, &(0x7f0000009e00)=""/179, 0xb3}}], 0x8, 0x40000001, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000a240)={@rand_addr, @broadcast, 0x0}, &(0x7f000000a280)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000a900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000a8c0)={&(0x7f000000a2c0)={0x5fc, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x46d}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xec}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r12}, {0x260, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x4000011}, 0x50) getsockopt$IP_VS_SO_GET_DESTS(r17, 0x0, 0x484, &(0x7f0000000340)=""/6, &(0x7f0000000380)=0x6) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 13:24:00 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x15525b20, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:00 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001a01000000000000005e0100000087f69829652f77f3ac1181dd5b128486fce020ebec7a7bc801bc15a40c10cc3db3adc24742cec773c20c328fbce14abea9bdd86e9069eca8b320b92c8a330aef0591a245949bdcab79176e98"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x3d, 0x7fffffff, 0x1, 0x2, 0x9, 0xa, 0x3, 0x8000, 0x8001, 0x2, 0x40, 0x80000001}) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f00000001c0)={0x4, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:00 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) 13:24:00 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x321100, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r0, r1, 0xc, 0x3}, 0x10) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 13:24:00 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x15eaf1a0, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:00 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:01 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x42000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7fff, 0x1, 0x3f, 0x5, 0x20}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1}, 0x8) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, r2) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000011c0)=0x1) mlockall(0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000012c0)={0x5, 0x374, 0x5, 0x9d, 0x100000001, 0x1}) r3 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffb) keyctl$update(0x2, r3, &(0x7f0000001180)="12", 0x1) getresgid(&(0x7f0000001200), &(0x7f0000001240), &(0x7f0000001280)=0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000001300)) setgid(r4) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 13:24:01 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x16000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:01 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 13:24:01 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = getpid() ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000200)={0x0, 0x8, 0x43}) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) fstat(r3, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000980)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000a80)=0xe8) fstat(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000002500)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7f, @default, @rose={'rose'}, 0x5, [@bcast, @null, @default, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) mount$bpf(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='bpf\x00', 0x0, &(0x7f00000023c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x400}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x8229}}, {@mode={'mode', 0x3d, 0x2}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) getuid() getgroups(0x3, &(0x7f0000002200)=[0xee00, 0xee00, 0x0]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x14) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x4) write$P9_RGETATTR(r8, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x1040, {0x30, 0x4, 0x6}, 0x91, r6, r7, 0x0, 0x3, 0x41, 0xa8f4, 0x0, 0x9, 0x5, 0x8001, 0x1a2bbc72, 0xffffffffffffffff, 0xd55, 0xfffffffffffffc01, 0x72, 0x5, 0xfff}}, 0xa0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x0, 0x4, 0xfffffffdfffffffe}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:01 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x16838820, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1993.186233] net_ratelimit: 20 callbacks suppressed [ 1993.186241] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.197312] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.442041] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 1993.454968] FAT-fs (loop5): Filesystem has been set read-only 13:24:02 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a52e94877681f5e010000"], 0x10) recvmsg(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000005c0)=""/250, 0xfa}, {&(0x7f00000006c0)=""/134, 0x86}], 0x7}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x0, 0x7, &(0x7f00000000c0)='system\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:02 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget$private(0x0, 0x2, 0x41) semctl$GETNCNT(r0, 0x1000003, 0xe, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000001c0)=0x502f, 0x9, 0x1) sysinfo(&(0x7f00000000c0)=""/178) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 13:24:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 13:24:02 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:02 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x171c1ea0, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1993.665827] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.670989] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.676136] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.681200] protocol 88fb is buggy, dev hsr_slave_1 13:24:02 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, r0) [ 1993.860809] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1993.896444] FAT-fs (loop5): Filesystem has been set read-only [ 1993.905858] protocol 88fb is buggy, dev hsr_slave_0 13:24:02 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x9, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1993.910997] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.916156] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.920552] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1993.921230] protocol 88fb is buggy, dev hsr_slave_1 13:24:02 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40100, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1ff, 0x6, 0xa5c, 0x2, 0x6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000180)=0x8) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/108) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000001c0)) [ 1993.975563] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1994.017548] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:02 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x17b4b520, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:02 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x400000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0xd, &(0x7f0000000080)='/dev/usbmon#\x00'}, 0x30) sched_rr_get_interval(r1, &(0x7f0000000100)) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 13:24:02 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:03 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00051a1c547a524367681f5e4d0b47cd44"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:03 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x18, "ec92080563556886650a09ab689c492803a49082ea0c5e85"}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r1, 0x2609}, &(0x7f00000001c0)=0x8) 13:24:03 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x184d4ba0, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 13:24:03 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget$private(0x0, 0x4, 0x201) semctl$GETNCNT(r0, 0x3, 0xe, 0x0) 13:24:03 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:03 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001080)='/dev/sequencer\x00', 0x4000, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040)="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", 0x1000) 13:24:03 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, r0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4441, 0x0) getpid() mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1994.958924] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1995.016285] FAT-fs (loop5): Filesystem has been set read-only 13:24:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) [ 1995.070715] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:03 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20200, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x7, [0x200, 0x1000, 0x4, 0x3ff, 0x1, 0x3ac3fcde, 0xe7, 0x5, 0xe9, 0x7, 0x10000, 0x5, 0x23f1, 0x8, 0x80000001, 0x6, 0x9, 0x9d5, 0x1, 0x10000000000000, 0x81, 0x401, 0xa9b, 0x0, 0xf5c, 0x100000001, 0x40, 0x85, 0x9, 0x2, 0xcc90, 0x100, 0x80000001, 0x1000, 0x1f, 0x6, 0x923f, 0x6, 0x9, 0xffff, 0x3ff, 0x80000000, 0x1ff, 0x3, 0x8, 0x0, 0xfffffffffffffffd, 0x1], 0x9}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x105001) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @broadcast}, &(0x7f0000000240)=0xc) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/238) [ 1995.148489] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1995.229051] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:03 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x18e5e220, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:03 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:04 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0xfb) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000240)={{0x0, 0x3, 0x2, 0x0, 0x400}, 0x100, 0x8, 0xfffffffffffffc00}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)=""/223, &(0x7f0000000100)=0xdf) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="04001a1c547a524377680606183551d31f5e0935f133d63fa94537db49f75699f8db162a25de18bc8d5237a3047738b5b8f04802cae8e2c1cd8fe3eb4ece892ae30b88861765c139bc5450b6bf56deaa031d416e5a375ba8dd7454f1b4ed1a2a19e380838bd87186575b24217b2ce761d5d829a5258078342dc94cf96d67514434d41158d87a573922588c33355cab46764634dcd3f6dacabc56f0f093731eef2bff72b1e207a8c90d90cf420945771cf1a45cb34bb8db0bf7fde5943b9838b61131139608ce6a963cffaedfd61158bd12c3"], 0x10) r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) signalfd4(r3, &(0x7f0000000500)={0x7}, 0x8, 0x80800) unlink(&(0x7f0000000300)='./file0\x00') ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000880)=""/166) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={[], 0x3}}, 0x12) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:04 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x197e78a0, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:04 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 13:24:04 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x3, 0x1}) 13:24:04 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:04 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, r0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'bond_slave_0\x00', @remote}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x4, 0x1) 13:24:04 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 13:24:04 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1a010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x81, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x2, 0x1000, 0x2, "66ca"}) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x3) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, r1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0xea21, 0x81, 0x3) 13:24:05 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f0000c00000/0x400000)=nil) [ 1996.940832] audit: type=1804 audit(1549545845.277:64): pid=3994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir913033358/syzkaller.uDBMoD/3586/bus" dev="sda1" ino=17585 res=1 13:24:05 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa2000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @local}}, 0x8, 0x3f}, &(0x7f00000001c0)=0x90) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000880)={"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"}) r3 = open(&(0x7f0000000240)='./file0\x00', 0x10240, 0xffffffffffffffff) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:05 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1c, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x2) 13:24:05 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000140)={0x0, "d8b935b31e3b86d2c52d8497237ff62e82fae7459f722654fa226e6a519300f5", 0x0, 0x1}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) 13:24:05 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1a170f20, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:05 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget(0x3, 0x0, 0x202) semctl$GETNCNT(r0, 0x800000000000004, 0xe, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x114, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x84e8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x82c}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ac2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000c5}, 0x40000) getgid() 13:24:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x20001, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x80, 0x8000) dup2(r0, r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) flistxattr(r2, &(0x7f0000000040)=""/75, 0x4b) [ 1997.400377] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:05 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000340)={0x9, 0x108, 0xfa00, {r1, 0x52, "4e9993", "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"}}, 0x110) fchdir(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="fc62565077ed13aaa7d9c2aca153b53fb87ec1c9bae8", 0x16) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) [ 1997.445321] FAT-fs (loop5): Filesystem has been set read-only [ 1997.485502] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1997.559193] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:05 executing program 2: pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x3) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x103000, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4fd3280, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000369a4806626bf206e35b724c710d833fa74452f7dc7c91c15c7f2570e78e6f1809103ec13508207c5f8d63acc51e354001c93ee6febf685b32910a1b7f13e00062c263ee78efe7cebac6db97803a9760c1e37a7fc74bb351a9298be5f30ba379d08cf3b9350065e08f09b4e55a1e10d3f2fdd9178aa1c821d1ce19a2b2461b772ec01c4a708ced6870e02755fdf0623140f140d0929c95872264eda14d0d8f8f680bb6aa3b7519a60000000000000000222e6bb5344ee0f63a10eddb5887c9d5cb1e4ee5a6aafe08e29d8044eaa6d76c7a755b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x20) pkey_alloc(0x0, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() stat(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r1, @ANYBLOB="040000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800046a", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r7, @ANYBLOB="12000724", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000100000000002000010000000000"], 0x74, 0x1) 13:24:05 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2f, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:06 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1aafa5a0, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1997.613036] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:06 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd, 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x406081, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x40, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="b9800000c00f3235002000000f300f023f0400660fd8b8a8000000c4618c58e848b808000000000000000f23c80f21f8350000a0000f23f80f01df460f01bd0000000066450f38822d000001000f019cf38e300000", 0x55}], 0x1, 0x0, &(0x7f0000000200)=[@cr0={0x0, 0x20000001}, @flags], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x200, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) fdatasync(r0) setsockopt(r0, 0x7, 0x6, &(0x7f0000000280)="6d440c2b55c89f6c800049a81fd410799f29e2e67d577e50045c4c9e3d55324fd42d7f6eab4e42cc56e32292bd424fbf1f6ec34b42776d6a8c820441b4958198a2b0929e1516bbbdcffdf1ad157adf681d58264504a19a938fec14938b3729552cee7eeb0beebf62ddc8e1316c2167575ebad0c08fb72eb261", 0x79) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0xc5bd, 0xffff, 0x6}) 13:24:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) [ 1997.996495] Unknown ioctl 8827 [ 1998.019343] audit: type=1800 audit(1549545846.357:65): pid=4167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=16805 res=0 [ 1998.027923] Unknown ioctl 1074835060 13:24:06 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1b483c20, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:06 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x42, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1998.110066] Unknown ioctl 8827 [ 1998.113521] Unknown ioctl 1074835060 13:24:06 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10, r0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x24040, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'tunl0\x00', 0x200}) ioctl(r1, 0x0, &(0x7f0000000100)="cea33e3c468700964c6b55ce8a57ad292dba07b5c31ecd50ffce1ba7be3f691d58d6fc5585bee1b7a862092b76708f08afe17204d5661b1cd1908ca9f42823324f1d8e39b03ef94de34fcbff8d5f4bced8f0ae4fe74eaa219e436ed62f19f88295ef660b2cc988650ff1019db80aaac5ad33dfc745eeaab902c590e4b34d943d4ae5cba159cb0e70830d8654acd3902bf3582ac56aae94860dd7a2dbd56798bd07520ce8b3b45b21714d8ce0eea0da60b13c898cfe14688f0f7ecf041424aac1af678191308fc6707d4b43311158ea63485fefa3") mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000000)={{0x3b, @rand_addr=0x88, 0x4e23, 0x1, 'none\x00', 0x20, 0x10001, 0x33}, {@multicast1, 0x4e24, 0x2000, 0x0, 0x8, 0x3}}, 0x44) 13:24:06 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) sendmmsg(r0, &(0x7f0000009bc0)=[{{&(0x7f0000000240)=@rc={0x1f, {0x3, 0x6, 0xfff, 0xb83f, 0xffff, 0x2}, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="b6c91e22b03c4bcc4c59643004eaa5cd5fc94ca6d7ab96edf80b45df6569792c89e0f02e392568ecb4b794489c002b5615359134f133b96b7dbbd231735e007163cb0e6c3a8d187d3d05c67e7b5ce5c4522fcb9a4f14d5771bda5172cd9edacd4f6d891b0743b9c04b4df61841b0a565b9cdc4dda71b980081fe0c6b2fa5c544cb1a220abd726756c360ab0e57dfd30507c0ada82135f525828e9335c40d0c8e22858659300366cd1306b8f3ab78827f2c31847f5a7c9bc37ef2665a7b1332a20027a010a4743c6f3c9d7d852841c5939082bd53f7521d82a11181fc7a9072e0a8e7c59fe568b97082904f436049565470c41f0f27059387", 0xf8}, {&(0x7f00000003c0)="26cb71857a545800133223a4567183b9b921eb8f102c93e5626922c395f115996b66fe0b72be0684bf8d019f22a47bbb", 0x30}], 0x2, &(0x7f0000000440)=[{0x100, 0x10e, 0x1, "c51877cdb66cb736a5e8f8b20c5336fa64a4445a1003004d81a2e6c14bc10a8b4cc2621487a211cf963a9d6cf3bf6601d608c0f607d43e3d80449c62c34dc55fd09322909287c24087ff113d7fb055ed433be94dcd905800bfc299a46da1a774062f6eaa1513da4a5838c7421572df868fa5b15ebed89389a024bb650bd23014a327f05b974f4a629c5abb7fcf06ca39557696b771039edd67ce5c43888836aa5ac00e1e7dcd5cb5d7761c93fb25a47d210bfdba25fca3e0fdeb37a403806910f201b28e0d9a24896fdce45e0ce51f8800fe8a69c0b45987c123039e6d6b9518365f6b5fa5f596b1af00"}], 0x100}, 0x84}, {{&(0x7f0000000540)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, &(0x7f0000001780)=[{&(0x7f00000005c0)="512e188a3daff577f6d17480de3e513bddd3385a6a0209b9ca6ba352220c170d63ef7cc74cb95501db1b3c114902e1b87147b66e2a70335e1e2daf7ec1cbb0017cf4183022bbe89cf8d2bbf144f7ea2e10c075af484e3ef3240f2bfd27bceadead3b85abcb8fda650a15f388dc188d8db9d7017250388c280013bc2bfe1ecc1d7e0abb68a101fc0917267901d717d088c845c1a63b7cb5ceb900728bceaade4b96556817edf183d51c638098528820a8321157cf0bc6b31f2867561c3b0bd1946fc9e5ac2a118dc7550def3761f9cf6311ef5a7a9e9c62b48128", 0xda}, {&(0x7f00000006c0)="dadda73295bc88ac253885186f03f83322290773d9451398965ae7e0297d7000ea0fdb6a3bd6e12b78cc21066d2d14ea4b25c8e88254e4fbc32949d0f6e4a6a48394c2be978c5a46f912364cafce0c74e6a10923fc5ae2c6582c13085fdaca12e92585332dcc1f3bff23e09b12f980a49cc49ac7956ce5e6", 0x78}, {&(0x7f0000000740)="41e0ca6dfd982de592b404cfc04b4e8c75c6f5ec48e9c6762a6f9d9a326da0", 0x1f}, {&(0x7f0000000780)="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", 0x1000}], 0x4, &(0x7f00000017c0)=[{0x30, 0x101, 0x800, "ae30355b86ffd848724e21ca6620406bdaf88bc99db017fee1dd0fd9"}, {0x30, 0x10f, 0x7, "fe79442570840a76f9d6fd2c442497bbb6836d7c1f33c43821d482f4fdda7f17"}, {0xf0, 0x11f, 0xff, "958d08e2914797671ab1b0cf36be4bc467ad69c225e026c9b85a013f88c6662b2f83bd2bc28dccc118c33b66f2c89b7a366989df3b115031726390a8d74bedf0dab56082e68f811c2fb5a8600da25b83f153c77e02ef3ada8a987171dbf93dc255a9a962e049b582d0dae5ec04440cd4c7ebf861ec475e13a51fc0f2a507118bcf640e0f6d6f9d56f9fd238661708af3e80c81685d00f613195018bc548325891349b8995692c59f2c168d4c2370550f9c051a532ae1ea34e005400fd17b0c2aeeda127db419b8960df8b46dfcf374931692f6bfbda37d2fcca9331e"}, {0x98, 0x112, 0x9, "4de0193e1c79ea33ee07a48ae8dfb3591e59d33af4428c66bc713808c32cc9bb0bcb57dba055ccc7b0abf78e8eb4e492376781de13bd202438d174b2e176c7e97fc315b41e190b2e9b9fdfca8727b0ae149b88831cd8e9a2a25c102645d652b64e11323688e7dd1b1ba5e9898c92eed5b3d18528a098f89dd5b5f0b5b60e6441cb255ff864"}, {0xc0, 0x114, 0x2, "014c5477017e2bc7c7a2ffe322564acc71461126e8fba9c436977349c6f177a5afe5258cfb6205732a7127f80cd47f498c566a264909cc73ab9650162e65ae7902fbc08f757441f369d8abba06fee025133f9272095dc07625a7ba71f53361675f0a2fc480525701c88cab0fdb2879bcdbe3d1b0e97f6a14a47550bfc944db1ef0209fc6e8589fa44194d330f1ad8146b8915de017efe82478e8edbb4a807a124e94222b0bc3b699e196"}, {0x30, 0x110, 0x4, "40334a407d44364bb8d851fbd160799913e1623ea3e951234c47a6"}], 0x2d8}, 0x800}, {{&(0x7f0000001ac0)=@nfc={0x27, 0x1, 0x1}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1, &(0x7f0000002b80)}}, {{&(0x7f0000002bc0)=@generic={0x9, "295bce8d30b2472a0fdb0c59cb2ef8c0b74a522da9e4edf42fe895516af062c65dad5592dec521b00f98289c0c220ee812c916cae191d5df6a253185411ed99fa0d6bb6be0218c449bd083a0d5d917cbcef3b17de1af891c1a30876b87bb39d049dfe645c7fbff68d90815b04b944999f36014d079c24950892edd8cebd5"}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="4b397746cba90bb69781f08dce2a5343cb539196eec299de22b254f69f081bea48c63a52", 0x24}, {&(0x7f0000003c80)="38b9d56730b87196caf03b65565de595639aec430779c20e5f23276501af48e77212efabe324fbc7bf3d9bd8608392f9db577871333ee24eead70a74977e62bdc776c9b978e0eef23528ed4133e0c90c2f3dc29362c3d8c7ecaa446e77de7a769bd4af5214699b37a08e2ff518c9f2fed59f", 0x72}, {&(0x7f0000003d00)="846b28c48abe4ceb036a6d24f80c02537a9c10349f86cc2c6ce6467d643598297189fac78ac4d08e8e28b768ad6d29b149b790c0", 0x34}, {&(0x7f0000003d40)="a9fc9338e501bd695ac0e780115d3ae21e6525c4024c630f56a86bc5e707b96e421df772b6e5eba1c99bea1199c2dc2610a9ff964a96173bbd60854ed1e167d134bf06c622b30b8a53548db765e32ea25d37aa3d0ade70457c008bb5811ec03b1aa02a73a4cef666f7df18a1e4e3bfddf1739a25bd96d7c2dde418e3080dbdcfede6c50458f2a46ebe6e35f0c5b2ef519a8e08a9d7eac9bb0ff138eba8c767ac0fb5eb0d982f42aa", 0xa8}, {&(0x7f0000003e00)="0881defc331f8d9216cefbbd07619d8dc5655679ae59edcf4f647d043bd135ac8c9a53a4b95b188adb94ae4a63c58abae37c95b8e0eac567bb1eedee5a2f31762973816214160f35ae4584e55eb009ec2c7484ee3f1496821d07f1158c2dce44c7156c75560730661bd4c2310c72979cd7317983f62286bb548b2cef4bb5d97b700de6660879c125d474da6631e0d84d6df6ce", 0x93}, {&(0x7f0000003ec0)="149835e166789278d6bcc5cf381d0bc26961aaa32b479bda6c", 0x19}, {&(0x7f0000003f00)="b34d9eaaba4d78f09ebfbb53332df0ce93798b46614df469f5e3045f0c475ecfea3a232dc6b9ef5ecca6643c73673c2e4285049a96f27b9cdae2313de8c178bc1944853f5d28e6cc8a3fc05a170d22336f02bae2322823c76d97726381d25df9bc4353910523f6b1bb3fc58123acece98dbc7a5ea2d441615329e75fccfd6cca362b043ded1265320c207ea2a8d9a4bb8609505f4c822f32e7a7663a1d24ac5160", 0xa1}], 0x8, &(0x7f0000004040)=[{0xa0, 0x10b, 0x8, "d0d8d6b9f3651d8f0c1df2b74429f6c906e45645618d20f92e3cbafb4d6690ddc06161f0c56ef98df4df4c972e43c552e9b01094b293756007a239aa7390a26ad215f8bb9e0a3841cc00e24e8f29db30667d2887e0c60756a246ac6194a25bc1ed63c0dc966b04cf7f50c554ad1564bef814f88802bca83dd404d95597ac9f4a1ee120ac104acc2c5c"}, {0xa8, 0x88, 0xfff, "13bac3a05c142ea7653585cba0275beabba1bde99b33c43dcfbbc1e5cd8e41f3ab1d5a0da5cdf2bdd38f527c22b641b99934c72b2ae08d887d1ca99906b4faa75ca96123a72d3306c2e75595bdc31fb987c6934597e950fcc72f6fdb93816c223219064a5a1a5f7491b6a2ce26a58a4e94e22387f6eb60a90f79e5af4f362f50684c52ecde709af6f2155ea356a137fbfebda6aad5"}, {0x1010, 0x0, 0xd0, "d0b034614812cd3bf15e743c7b5d3273a8c9a2ab0e4d261e0924998e96479ae6fab3a0bb5ed3f2f7dabdf71ff87ce99edde7f66e717609dd6d0739f8991fdc43d2b8f2c0240a7cb49f63eee02f06fb5e917b7dcd1249df40867885edb814af9c562a5e64613e6afe088039818790713ba1d623254b003f76423fa2d72e42daa889665c0b628bd184f922efeed69c21bb7ff17ea8010ec3d5c1329b9adaf2a17bdcc6fb801a89ad33ecba9011d634f780abf63f539e43071637ffcf170d79dc633fc724bb2b647490bd22477dfec6f16edc154b2e6e2187f7e7f537742b1f61cea125e7467da7a7a06e909c919c38c3ebcbc6ef272d40c4c3de51e25c0f20d763ff3caab81008cf0b8201bac9ef7dc3ff6930fdb7917af974a22c7b98e9cdbdf5099ca8bf0ffa553e652bad6a676c018d4c1843add8508a3620d087fe044fc14b2cfde125aa2c715643fee4f959fa0fa2b2cc45e69f71a2aaf865b5d8913f9badf106db85704bf352d029e25702b0d04da78f6b2a65448cfa27e4b19fffb0175101a82cc56cf761d4189e01903aee1e70148d35dc5b27df7f995ee1e803ce242377272e53acdb645a82617db97bfb9eb2c5a9f35885a0ffb596b17b514af3ca0a3a6f979c67cdeb6c4cbdcb703e69649805fcb1bfeef0a2444b7e08150b3fba9c8b3722f1fc60df5b8639715a2b6dd9fb03685111270a3025bd182aa34697df1f952ce99755614686ab33e7a0202eda5f2a938142a26004963bf2dd4e4b5ca0f6196f7a57d1f0ef8b2a44faa13e741b52d82c239fab70a365b84bdafda097bd69da9e04211e73477c4c7f74dd9f3c4ac008d2a8b6e89531d0693449a6364f14df52e62e8ef96dac94096ca13136c3b3437694b1ead2976afd766ab7789f9d97cb01484ac9fe573b67b71f04a91be94ef539f8179e3c76d4cfdb51969aaf1731f129074d5ae7d7dc7ee2883e10eefe2db59ff5f5409c8b1bead2074e35ce2a98f5dc240e5596ef9f0836cf3302e2bb2e6be05e94e29da7432dacee95f9b21812edfe6107144abf749b663b6ddeb12dfb398d0adf2400bf35a18d22d44c4ccce8b5c2ffe96c9ad43d1ddf4d2a00d83d178b16d57f88da5d787e867a4bf519fc9219264e4eada616f0c1b8826fdb153ccb7d0c659ee87959e8d68162b926c1a042bd78bf73a147521012f654dc77366482882fc9c63262e23725ce2fdc83fe76a04afcb38bb8beb7a0b3d224fd3924fa4f7e104f9dbf09f2e14ec084058bfef4b9bce01f54c1e428d6d02824d41fe5a02ae4e344f5231a888e5c373e1d08f8dd347af31a1dc1cbaecc17cec04bef95bfb9e3be6fededcb8982d4e49861cf5089ac1ebb7b7b668c90ddec13b45f50e69f783f84474e739923e9c7ede76f32b2f90d30140d2301d9ff7b5bccae7fd0e7d189267b343e633b2a3e0ef9482370acd6517361bc5e8b006419b8020bdc4f48eb7fae5fb5576e0d9a89d4cf5a9e74f4a34851faad72e755c5c9c43c51eb895e7e959716d70d3d9e485a3c40c0987b1bcfd857b52f569a4958b46e10f3bce4949a9b4626c9d19aac7877cd2b20f8220e168418b418611b94a968e259b5cffcb2d8d5cadd7ef52d19c34edba6af724996c4f068ee8aa76fb0f87e0b93bb2643ff1a4691e804bfff32888d8e1b032275b6a2090483e86613976105dadcab1cbd45429d3d4d9bd10656fc7f354b1866813fa99f0ccaecfee65a771e8b4185c9979303cd22b36d654efdf68e5456cb2dfeee7e6a7a87cf114dcbd58aa0e6f1918b1b01ef47282cac6077adcf56ad62492fe718c2b32dc98e253a18a921973859116fda8bf16857fdfb161b4fecc05041ab7ae0e05bd26d0aee5daca3c0a3025d8030220f28b08f8f0f8e99f376b3d24a9da2706b94f91deb58fc12e4c177ad9f4aa816096561945357597ff94291e53f09b17c505e450f366c6fea95561b5520d06026a19aed33a13b780c28ef5da4aae8f945f1fc182b2b9c440a84065e168b87856142fccd8c7321c998cfff6e4ce2e7e341d8be515ba50652429b83e3f77b59d9392a39ce491bc8f6cf86d30ab82f1a34e58d99f1d8548fbdf7b0515a49528a7b8e27af5b68ac07d93cc6de104710c88b4dbfae42072e4a76d4c6b6782beb129e18624dbe7df32cd55932c2df04fa8a68507be26146ed770e43c59e16f852deeea0fc81221bb659aebded8db9f808aa9b1bf8476ce4bd898cf40862a11fa1284af32065a321e1a411477390a71335107a3e532436d390690f09f5c02432a2316e2c97e7c8378127823b21de0a9a1d4c20fa896a21c02053bc7337fc4e6d3487f4302baf139d7e4407f8be65b1b9ca1474a8789c485f1bf60142d16440482d09678edc07d42668cae59f46c4c7f791a6565db8f72b2427bc797e07dff22a3176827f88fe8822f6527ec910c6a3db1a896f5d51df522f65af725fb2e089d9b5e2f20aaf6a17e6066d530cd35601cc92e84f6cf6163a03d85d005848599a368a10e3d1dfa8b2010760d30362e2ba9ba0a1b5a81de53625918b8ddb340e6efcc23fcd058ec97e334d44748d7911b67d7a91888eacc76d200211d1cc482f1383909bad693dacb5d232bb801a485f2ece1e8fa6b46ea735b56eac799ce75a81399e511169857c50e3340716de60a2226e62894a31dfc5b0575cbb402b5db81664ac8c26acebf2c11ebb376f0b5ff74c8f18af68d58cfe1d1e8cdcf1aab862670f3afa3783d1282bd86fa990f5b984368ae6d07ad323d625bf7f65ddca61be7267413abd5fc31a8c7f7b813c73c198c43234e2f3d2ddcd0ebe8e653c14202b1bc4ac7baf11f83f13f36bdebb9a4e0f8434c2ae27e406c89643834a77d712316d8d5318499169c4a2ad25a1f5cf58b6a67d1e6e51bb903004580859a36e8645da35f47adbdfe1eb2f51ee875a14ae3ec79e16f6245a9f7fa1d2c30b3c24dfd35b0808f620b03d082f1a28dc4d97ab5976234c1ce96d1780b3e41da88f47d1c18a19e1bca809022c2528e14406ab5ec75f7cc306a28d4ce7c33e5b434bdc7c779b754c512a46b202e166b10b792eb916b11f0e48a81ff457d67ea8472c776e0017eeb863a3883a2f1ffec39d23643b60759d1fb4398ba708fcbb417eb285b5deb7d8bc55fc12baec0ea6e701a1fea86b598fb3613447cae5daadd237f473700f06f9ba29121e82f16b8c03955efb79d2e5e5d9202327ad419e2eea6d208dff8e58b23e293d04ecdaeffe0d68eabe9cda28fe34aa75018895e8ca6a9e20fcaf4be1d7f3a0eedab91853faab8623b4352a21f5bf63d82cbe341b940060e70cf538177c800900d4c4b666a83f16170f7be1a0eef0586217c6770c0777283495f1468f01342feec816ca82bb44f0abf1298b5c2bbb9665c5ef3852b6b36f1f3bbaccc321bb900c3056ca1a1083cfd1c4ee33f51607d4dfd70e2022e37882d8c25dcc9a42bbbcb1e5cba92a093a286274d79ccf357e5f17112f6fe58eab3d3a0bbfbc9914ee311ebe07f8eb30c2585d1328d84c19620686dbd76a436b62272dfeb7bfcf051cd90e203a8b0495e44243546bbd9f1fa922fe9e1da010f769f440175de1e21fe011a4f54fd8190ed77a62da1135193f82b8fc61db119a6e64ea324b7c0e416a39f10a391b1514644ba712e195747d15b9e773cba7c7d7e260e79a44e050efcd706f75d06bd1278672bcfb351c796cda2ba8ed069c5afae9f3b7ee2a41e86ef4063ae9ccdb682531a86df78d4b98c3ad6f85ea7ef91a238a14e85f323703c150a5967547b11e89403e0e84ce79826ada17dfeaabb0f89cdd1bbff3b098493cfd0c27851ce03d3a4bbfc51a841bd3f0e65fa429c9667f8d47b1c96f333661b5b0f226681a3e5598c7d2b2e998d31f395c1a90bf6aa6ca3646730d34da8ac44e996b8d4d39ddb8d1f477dc56e61569dede4ec4f80277100aacdd11bab15582ab57824daa38ce3c9ed3958d597b77d37e01d3199c4bfd4c945b8d8aff18b8c90ed5947ecab64deab8816f06e9dbb7d59ef5cb6e38d41ef6c2e79c3f1a82f19b6e383ecc06f6bd1354da77bee21317c636c8ee949623120a0011f39349fac4752cab0369acd9e18b590852dd758a046ae7a29f7c3c7261c43390d0c969a6d82d6fb74e5e60a3974c15ce10389d945c58f880b47dc3347bccb38aa1251a790691ffebe318b4ae6116a0dcf433ce6f9239372c556f3e4b94ed44b273f45b0ccaabd424154d6c4094e83ad2385dba99bf938c704657eb5852900c4c37f1eda3659740f4ed26c11634c0dbb91644d2220e7fda556d4a645b59009c49774f9eb3b3b0ab999a00aac4aca21a44d53f86914e24b72ab69a5edaa8b4ca4a11cf98193811e76c33f1d8a443e87c56b3ea9d28f004e371dc1b5aa22190551ba99d05a09a87dbbbceda8e7260228ba72adf94854091ba175a3c6b2396ce0abecfb8d640f4f9e516da9289e6fc2b18d78b566d5b2fddb4ae6300ca88eb7bf9bef38429f29946d42194aab5588776287e37e3aaff1b5642299ec229076b6f2e76b6ab7c7de54b2668f02a4e2f06a35325469c5b37f3736c2b93d11e50095cff9394e25d1057012d3d673f3b1ab4b91eed1f6b82a7a48e5844aa00cc665bb7724ebb988ff29c81e43107bc9f9c76dbd14a5abbc06725cf7158d4d7d1710fd19ef6780af56b6c4a7de67df2664598944b5c0f92d4b987a3970a3ec4c911433ae9cb0d4572bcf303d5a9501fb49d2f417b9cfdfa676b38716e02fdf25c7e6e7a2ff064e8c527ec3e9d4efe2955375bf285ccf7ff841b0a79652a80c7dd06836bcf69b8e491e907ebe83d6504753a5f35a29f4b28334d1473fbb93076de86329086a5618b6e25243eb3492d2eb71772a4fd69c4dc5fe0c8373ba08fcd7ed44e4a5ec4be52669c9a898e81f5a5b8e71bc049a63598bf93431b1415fd874d603906b447b990961fac1f1e6f943faa00dc626451710a6c627a3fa4ccbaa3b29ddee74aefb689115bd41446a7a20aa463b270868387582cec4a950298afcaf11a692a6672707535c6f925bb557088863387b0ad922a477987a4a376d256bb3efa32dd47be516b9e9f645bc8ac58ab045ef97d0d2128c8de324f7f741c013c77062e3b8eb28eea9dcc0378655b29be09903e49334534360bd3a6c6940b986385ae38f73cfd1c96b337cbb512002a2b8b89a89dafa4a83e75df0ebf159fd7c3de1eee2a7fb36ee3416c5ffbdf2eab081a226fafe73a90feb35f2a08b08f6587d0d8a8c7bfa707c97dfa68a3f30a7a1e3fdff7d9f188a452d7a62d55a0e9be61c84fb5257e195e0bd9b38d2932efa7866d498c52de409d26ebc6fd60cd82705fc8967cd62158d69afc06a84f6038766ffb3a13066581d361882cb1173ee569cc120fd2e1e73c2f04d6123871fdf2c2fdf9f8bebc50ac0fcbac283a65504e268fd98f90874442748757d188d1e1de1292d5f2b451cb662ad312432ebda072ad24115f166cccc8b9b7bb7bb333b17bd8a0d9eee2ff86e96e4e52c39c75d13a32fb2f1861dd40ac4f2aa1771d23ad11feffa91e4383534c8ff14f3adb62c051c4f43ccec49269bdea1bfa69e3e36866bf8c610e606ac77dadd64f79ddcdfedd210786899c9e9f4b2256269f9ec856afb8babe2ccb2e94b7a78be58773cdcd73d25725c34ac643a96c353bdf92169306ed349b288458c4c9419258ed2688e26265860ca0d913f83fcb0c4c1005b0aafbb027773a3a7a3fe535367ac43de4eff005f544498472cb24d439fd23b64098348a22b42dd01c881cd5ee981a2e4c86fa79105d32ff72"}], 0x1158}, 0x2}, {{&(0x7f00000051c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005240)="81ef3b2ee7587465437d5188c4d09cf05321e6a40510b5cc6046cabb42194872f65ea4154be857ca42c2b92fb7c80f6f6af3c9b2461a94f603cd3cf9dbfb8a42a4", 0x41}, {&(0x7f00000052c0)="b496a30f19fcc952364cd1b49286c84d4ae858ff6aa237928f4aee1d55674ba353f24328289b2b98c5d3d0e4d4822d29cc6632d3ef133e69f723072bb14d5ac3b03d86cef89e5ee1ce61fa6bebe8e2154a9fa8b66bcacc528a52040b33ad83feb8e906b78e6b80a87b50c04d893e7f6b7618b53f0f8281ff1f01fa2146afb230e26831ef6a0e45d53b2376fa7077abe0", 0x90}], 0x2, &(0x7f00000053c0)=[{0xb8, 0x11f, 0x0, "2544613b2e81e759e985ddb2a12f286be7ba16db454456670c8b134daf4f48e792217165150b7cff43ba3f8014e37868e0fe9659cf0f8f605ba6b7d81f57f8f9dc770ea78f5d3fc279fe69f581c20bcd4fb138a6f1d19b49bf3e0c51e4f24b9a3b18fc720996a22eae2cc6f16c78ca71be723616bc3d0d2968a3189a6e4a4143017d9ad4d80a7b25758fd0d78ca4ba0e40c8c37d5b23cb43f9a2147c33fe24a447"}, {0x68, 0x117, 0x2, "baa39d959f13fed793ecdb2da560cab85506e24bf82d070e75f72bdbb3f51a81b80afdfddc85e8e4d895f109451aef0c70df641e093e6f64f8ca41aeca4e96b1c9d2943aa3b036a4c2c234082002662067a6b28b"}, {0x1010, 0x114, 0xb1e, "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"}, {0xd8, 0x107, 0x80, "651d51021ed1f080ad4fcf4aa7bbe826c3f02af661c7d2d4066b0ec37337da99d8170466e03fda28dfb15c16cff3c49049b2a484a996e154c50b11839a227cd5467e89f754111f1972ad8a0d8981c0b38d8ffd6b008fd8a2c2ec8ed19deb461adcd553c97c410675bacee678f6f9e5a45e06a54e6b7be6aaae97049640ed57cae16fdc181a21a86b6017da3eed330a053664df77ab68dbfe806c49d3a534f9454532bf2a8496c1d46570afa107741e851088d6df89114d0833f9b20a35741453620d4d56063728"}, {0x68, 0x0, 0x6, "01fb27b4d8f9c23f4d36409bcf7912847895458a7a8a1f377d60f3be82f29f181c772972d2abfe27d452bb078246deba2eb4c5ca852dc9c846c02825be52a7531d15f25cb5bdfa35f43d2fe9033f28c423378248"}, {0x1010, 0x107, 0x7, "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"}, {0xd0, 0x102, 0x1, "eab121558f240bd9c61c93da185fe5a7253da545ee2fdc21dee00452f9cc2e4e3b5dc731e9b38d4937f5272616752021f38191e3bdb7a957bccb01b22267a7042d15a61650bbb9c1b8c93b3598332d3f6c9a56490b63fe1657ba0a8bba8a326b9a0afc634d6dd3e235a73199fbf86842a950975e72884e8c7a745bcbdd58f3d33e309495d1ebaa5a8081d7472fa7087839c1b78a4b4fe5f99cb9c7498dc747ef99c33d85ecee64a725c261bf63d33e1c37d094d74b17d60334e51d23e3fecd"}, {0xa8, 0x1ff, 0x4, "188a8c885781a956d8f637b828dafeb315dfe383660b9b06c3b570c9fd5b35a57fc40d1d243a85668b3fbbe9805df9d10b74b2d45933b6c56034d09d9aa3bb41c42e6f847c1b2a038d92e5fbba503301d1a4c24b77be3743458175200dfa4ced610eed8ab7245077b96c34e23448a3beb16b9431b34f60d7f480a0c0171f131b3b8572eab814aa85ba8ff3533b89bf9a5b4d4dbb"}, {0x40, 0x11f, 0x2, "e04d0379c8f3b22781da34505f1498b56f1c7884e6cd1e5bb4e4c6cea484bd2ba351e117713e8c820ce3bbad31e75723"}, {0x70, 0x0, 0xffffffffffff18c7, "6a857bbe59392af6a2266962ab7f93c2b9cfbde05b17382b7910a3d1ddc6ad6ff95669708aad4803fbf6c41bef16a4f62a55ac7850ac05e49db2982e938cce5b834cb6b6cc28a71397c77c15a1d61be45420ebff116b34e8d0a36e79cb08"}], 0x24a8}, 0x7}, {{&(0x7f0000007880)=@llc={0x1a, 0x204, 0x6, 0xc0000000000, 0x7d46, 0x1, @broadcast}, 0x80, &(0x7f0000007ac0)=[{&(0x7f0000007900)="a16d9d672257d4ff8b2b6500151891f2017e6a38d17be1393ec4145c87976e21471b56e6a7ff2035d7762949c2e0ecfbcdeaa9a3c6cbda4a", 0x38}, {&(0x7f0000007940)="02a6537474ac3362417c2fc0a976e3b039af353246d0a7162f0fefb2c4e8dea84b8edd9533eda508c0a0ec97", 0x2c}, {&(0x7f0000007980)="fc40882d557349bf756ca22923337766f39f215ea6ea139fa60410734ce5fe34ceb5258f0678e36c9690ac22cdaf195375f7600057dc537f7ad4c9a7024465153aea6eb2344ee2a01b422b8b5aecdac1ff76ac2cf4a8f7b57e1d5e6a2279e371c8f73d130043937096ad5b0402018f3bc30a1681ab63e5aa", 0x78}, {&(0x7f0000007a00)="3746c4e2deae8eb2f4a7fb2d0a03b51bd08e0fc5ec027e9444f2f6719edf55232bbf61bb1478108aaf33edbb0878396ee50d45c988869aa695dc9e1025b8f09e5dba9c22bf210e2d930c20f5a14e0dab0733f0d37119e58b860e5c804a06d3a6545ec0456e4f600478f736c023f29985c1b136c984defc2711431fd188cc67a7c95ce7a61c274c0a3f492a65a1f46997956d386295980f5cc3b2c85d01d320f1", 0xa0}], 0x4, &(0x7f000000a100)=ANY=[@ANYBLOB="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"], 0x1278}, 0x7}, {{&(0x7f0000008d80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @empty, 0x4}}, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008e00)="24d60382d0c8ecd098677042866836a17e8353eafa140a2fc7adb9a43e3de91bf2edc378eba76b268b729d6252ff6a3c13f9e9d2ecffcf41a3b192b41c6d5de596563d69e496dc9caf334e428aafe5b5415786617e93c7d5ffc47670925f139e0e6fcbfcbeeaba50677a91329a685b7085444a86615e306ffa8d1a6d77282685d105ba422b081f92d648b029e3a8732b7b744105184f3115c41dcf3dbc71292884151d89b8cf2279269b8af039663f038c247ce023aacfb847fc09bbbf265b7b688e628bf118b0725e68356b0dc5ecba7979a561", 0xd4}, {&(0x7f0000008f00)="be498cb15fd38305624d0d37652a5539a605933b6852892ff0203473ab6324e21a69a5e6e94e16a63f38cbefe89a1d0222df43adb8382e33bd9f615b0b5d0893149b353b370fb2f166fe35e49268294f196557d2332c97dac5e70b0081cc5baa7d138bd8b5931f75698bf6bead24770fff89a42ade3e0608783c55938b620e2431f120ad0ff4b1293f03995b9d37c299c608c0bd95df461e9a61c3da6d1cb11b2dedffee0173c59ba098ad1c507f", 0xae}], 0x2, &(0x7f0000009000)=[{0x28, 0x13d, 0xffffffffffffff32, "1afa1070feeb29b28dd6905864bedf5be0eb4644f94c69"}, {0xc0, 0x11b, 0x6, "6079d9d2153469e6f6bbb0b982f5a080f1d1e16bc371f6c8ae4234fdc99d485bb53b55f8450ce0b1796408e3af5a4bce32dc54fdde5c4c7fb19ee3133dedf0976f5476d1e137bc2ceffaa83c3d1c6d2bd427be72950f9bc79e8f6e5a0eab5b7ba810fd0557e2983aea27c961d797df3cd22c5318be88556d22a22a68d06090b076e7aff8715c513075ed99bb264839e1278034a8da71e4aa2e7d55a9f7feffda2c4e40d764534edebc98616234782b52"}, {0x78, 0x101, 0x1, "74c264fbd3c9611088243cc61487d8a6a08a624101de01ae9a8280094f4f20074a1d44cf7d0c2bf7512375c532cacb853bffe1a1c9e0c5b156728a31209d655729354fee3ffee45369186631a03ba545aa7cc09498c68a36a5c460337365d9e183"}], 0x160}, 0x5}, {{&(0x7f0000009180)=@nl=@unspec, 0x80, &(0x7f0000009500)=[{&(0x7f0000009200)="899ef6f25ee1721074d72a7c5a11953ef5769734459f2084745347fadeb5ad7ec6a54c28d34da42df42493d157f48c077574ec0364fb6378e893638a4a63aebf0e2607c4da68d39816f421b55fd3b791568376d929345b9c4189df64b94314c1fb73b5dd93bb598f80d0aa5a5a5c963f6c991ad382093cef781af36f1c43f873078a712a0de22631bc7a8daa4b356ce6", 0x90}, {&(0x7f00000092c0)="d49972e6699251dda7e9ec80015c56b846f69193ad8e491c88a60821bf05eb317940f56176478ca4582fa4805f4ea9ac75fc82d68584684de4afd7d456fbbca5e90fd652f31fc84bb210c1f3ba636e18e7ca2e355e994617438583e3bb699245997d3459336623e3c214df13d7fe657137e6cd780c160c5ed92712c5a2983a3d0e0c59f1e20f5f00dc0a30a1eda3b355f31431e6657ec0bcbbb15f0a8baeb03345583e66548d6dfe65e68c5e73fd3125a686599ce36aba75ce4dbb59766e505b048e77b02f4e51491afa6cb3690abb8b5989838029cf1ededd43169094729956c91b80abf1ffd4477b3c9218c22e674256", 0xf1}, {&(0x7f00000093c0)="67c3a0d865052bdebf1296f9cc38b93ea1dacd7793012dcda6d08a4352ab3051223bbfa4f6657141ee24fe8121175621442375f815f9025a5135f284ed9f882f439dc7c04c33a0892b8eccff556dfa81b0b2d3a825480326b313931e081d8702a49be21fcf08c104e41cd8307ce39df8976f226b53099a", 0x77}, {&(0x7f0000009440)="0a1da7da7e125be100a564cb642f33de4983b50663d9a3046730d39e5adc9128d43a1fafd539b79465d28b0e2bce0745cde9a4e15330cbb9e7d823ec529aafd0582cf3daf005f18a32325e9959f13855810743d73174c23561459964194be3156442", 0x62}, {&(0x7f00000094c0)="88", 0x1}], 0x5, &(0x7f0000009580)=[{0x110, 0x115, 0x3, "a908f47c1619bc92f1955639bec22a16c0ad9f1592a59f70c9998d361b6aa652741760fb262a23c8b3ebece6195bd3340c525496fb82d666b9be242a47636d8706cc93ac1b235e3a79323c61dadc14dc70e6a214ced053719041c7eb4fc607f7db78a75d9037dd902b1490b5fff70c38932c3e2a3f7ef45ab5ea892d0568b77b04f194f5798908bc89c3603bd41e270e764a86e08baa115c2a5a10a794835d9c3cf559e78659d5084cc47edd8abe7f37dde85e0c514ce0ab73b1d84ecdbe4af502c85980e018e24d01e632755db4b3d317b2c911d02a5ea6d00d044215f2aa2734236b156ef5473eac31f09dc6b8ed10503d8bcf933a6dac2a"}], 0x110}, 0x101}, {{&(0x7f00000096c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x3, {0xa, 0x4e21, 0x5, @empty, 0x800}}}, 0x80, &(0x7f0000009840)=[{&(0x7f0000009740)="f478de222a593c411ee94be53ca0a5e0167d421923c9dfb5a0edf0072f9bb28af86675ca0da4d6b8a3f7958862e5765c4a0de68952702e2ea6d7a76f433b4836f53c086eeb2626aecc30c67635060ba2d38022285cbb14715813e7cd272d549a70ef79fe77e75ebdf6357d30ba6efcd8", 0x70}, {&(0x7f00000097c0)="b67c8f022c8122e6cb7f9221a8d38c769278524a", 0x14}, {&(0x7f0000009800)="79b98e9b32b57695e3d226c46b6cd6dcd1f8a7643c9fb020a451e6020aa6da9850cbae21ec7c2334f9b18d70", 0x2c}], 0x3, &(0x7f0000009880)=[{0xd8, 0x108, 0x1, "ab6de00f39207bbf50eaf341f2ff67d9c788bce4b8587223244c8f78fe57936303a3d3c31a45da765732aac86e8d5cbe1cb64d4c9d3361df0a6e6f9f6d3f7292e51d079218c69e992174b18de35f0a59922a053fbe7ffa04ebd40a43187384410dedc2036bce869996f9fcacb2cc468b570a20476298e3bab7422778781cfbbad68017898c99d4f84bbecf3f627259bef0f45bd13f8182003c18cacb028e79393ae14c860278dedf19b461d34878f9aa68ac3bd9c23ad1d2a664d3cf3ccd2c1134"}, {0x70, 0x18d, 0x200, "8563b88a222d5241e918c0a5f8b9dab0aad14acd5c54cad32352e0c28d9dddc5a86caa67b121d728cde90e9b528eac968e7f5e53c1340491bd59091e94778bc690db0d6febbe99f89fb39c394900923fe0134d78600ab276a2"}, {0x110, 0x113, 0x85f, "ae8e09fcbc9898ec038f2aba8f628fdd88132dda840e6387b03f160ea458d0b3afe95f0080211ecdb6834e0e239331cd0ddcce6c8f4a6d4b590e8b3b1f3900d18879a680b1e584966229d44f27b467b24c38cc7d358c71a827891417d6e54d89d4e7a240e9af57eb38e01a4d98135d6bcee678b870ab180cbb535daa2c3ba265cfe74950145d41df6f74765011916632675a0949492c86da129b87c7ac95859fdbe8419bbb1418958ed2a3b049dc1e71af8ef5ab045bae31ccfaa68870c522e70a1f07efe1384eb5226a214f0fdecd5e4b1ac9094f674d3ba335dbe2c46185b3a42589b1b51f5e52066e85c2359b7a24196d2ad47bb509d4c3"}, {0x68, 0x0, 0x8000, "e1af0837dd314aecdff0fb6749793c2ae838bccde5b51c9ac8ef1f5c07c3a332473fe124321d202647c4d4900499dda0f38088f8953f4033c77b0654f1596c466ae6ddd14ffde24e5665137729ba236eee"}, {0x58, 0x113, 0x6, "bcbba76ceb75fe038e4590a6309c84e7ab4998302449bab07d62e65a0c170d6156a2f1bbd0e330591aa9166115fac13cfcc8e4f602e0a4cd367a95bdb3a97520e9a98281c266"}], 0x318}, 0x10001}], 0x9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f000000a000)={@in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x19}, 0x2}}, 0x0, 0x4, 0x0, "213768ecd7c8e2702837ff748a2e76d7842f5df6ef6b3b67a6bc33e413fa3a1e239198558b962147f45e3f04d287fb80f97cbdab6c30ff540372051d17b0a07071624bad51cd35ff18c54ee4e08c019b"}, 0xfffffffffffffcb1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) socketpair(0x10, 0x0, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000009e00)={0x0, 0x0, 0x0, 0x5b0, 0xcccf, 0x0, 0xf, 0x1d, 0x4, "114ab0a005afed99451c935f6ff9b343c18d95feb1039866d40fa5c10b9091b314778492e4be66e3af2c5fdb1e9042c807a099db3336ee6a2fa75874e144e26c", "e476e5cccad77ec73b2c3876519e5aad796525571bbd0dcfbd32a208dec04064882c3ee2dd3332609c450ea04ae53d1e6e7adfff7c9f811fbe3639d32b6f255e", "b6e007872b46d2ddd206837b389f59ea962c7b4efcae43a45335ff015033d10a", [0xffff, 0x4]}) r2 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f00000000c0)="06a1836dfaa23d449e") 13:24:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) [ 1998.340074] IPVS: set_ctl: invalid protocol: 59 0.0.0.136:20003 13:24:07 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c3d7a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:07 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x55, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:07 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x80800) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0x2, 0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:07 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1c796920, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 13:24:07 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x10000, 0x81, &(0x7f0000000040)=0x2}) [ 1998.991964] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1999.032584] Unknown ioctl 1075359459 [ 1999.037254] FAT-fs (loop5): Filesystem has been set read-only 13:24:07 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x2000000, 0x19c) mkdirat(r0, 0x0, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open$dir(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000ef8e"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x802, @rand_addr="d0ca338d2817a4d9563fb4b1164e07e3"}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/148) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x7}) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1999.090863] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:07 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x68, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) [ 1999.165257] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xe7b, 0x101000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @mss={0x2, 0xa4}, @mss={0x2, 0x2bb7}, @mss={0x2, 0x1}], 0x4) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000240)={0x0, 0x80000000, 0xffffffffffffffff, [], &(0x7f0000000200)=0xfff}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r2 = semget(0x2, 0x3, 0x400) semctl$GETNCNT(r2, 0x6, 0xe, 0x0) r3 = semget$private(0x0, 0x1, 0x40) semctl$SEM_INFO(r3, 0x2, 0x13, &(0x7f00000000c0)=""/206) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000280)) [ 1999.221243] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:07 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x200f171a, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 1999.425910] net_ratelimit: 26 callbacks suppressed [ 1999.425918] protocol 88fb is buggy, dev hsr_slave_0 [ 1999.436068] protocol 88fb is buggy, dev hsr_slave_1 [ 1999.461815] audit: type=1804 audit(1549545847.797:66): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir878033700/syzkaller.BqMIs4/3709/bus" dev="sda1" ino=16833 res=1 13:24:07 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7b, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 1999.642442] audit: type=1804 audit(1549545847.847:67): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir878033700/syzkaller.BqMIs4/3709/bus" dev="sda1" ino=16833 res=1 [ 1999.905860] protocol 88fb is buggy, dev hsr_slave_0 [ 1999.911024] protocol 88fb is buggy, dev hsr_slave_1 [ 1999.916181] protocol 88fb is buggy, dev hsr_slave_0 [ 1999.921235] protocol 88fb is buggy, dev hsr_slave_1 [ 2000.145829] protocol 88fb is buggy, dev hsr_slave_0 [ 2000.150958] protocol 88fb is buggy, dev hsr_slave_1 [ 2000.156179] protocol 88fb is buggy, dev hsr_slave_0 [ 2000.161260] protocol 88fb is buggy, dev hsr_slave_1 13:24:08 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x1, 0x4a02, 0x20, 'queue1\x00', 0x40}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:08 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x203c481b, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 13:24:08 executing program 2: r0 = semget(0x0, 0x3, 0x80) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000000)=""/118) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:08 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8e, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:08 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x2e0702) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000140)=0x4000005) 13:24:08 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80080, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x8, 0x4, 0x8, 0xffff}, 0x8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x400640, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) [ 2000.385527] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2000.431205] FAT-fs (loop5): Filesystem has been set read-only 13:24:08 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2e802, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) recvfrom$rxrpc(r0, &(0x7f0000000040)=""/61, 0x3d, 0x40010000, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x100}}, 0x24) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x1000, r1, 0x0, 0x0, 0x1}}, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 2000.479645] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:08 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa1, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2000.547540] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2000.609258] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 13:24:09 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:09 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x205b5215, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2000.927799] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2000.964226] FAT-fs (loop5): Filesystem has been set read-only [ 2001.000064] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2001.036383] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2001.061699] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:09 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="02f80a1c557a090077681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f00000000c0), 0x53) truncate(&(0x7f0000000100)='./file1\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:09 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xb4, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 13:24:09 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = getpid() ptrace$pokeuser(0x6, r0, 0x6, 0xe9) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x182) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="d77c630f2c3a85a066f78a5349354baa0de010c536d88b7c9f1734838114188c2e8a41d4742e83d98b382066a906a06b6f468c83c8275b9fb0af6e0fe2c9de641dc73f5006dc7ea89c10cc733811ad45eaecd6d51e28c7d2e098e9ef01e77d9c74fdd2f139323198be031864ad7a95beaa0c4b773d0f0bbd8e10e05c5d2db8288db9107b498bec58b8035a257f6e76cdb1697315e9c420379350f8804cc133", 0x9f, r1}, 0x68) 13:24:09 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2069791c, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:09 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x1, 0x6, [0x0, 0x4, 0x2, 0xffffffff, 0xcae8, 0xffffffffffffffff]}, &(0x7f00000001c0)=0x14) socket$inet6(0xa, 0x0, 0x1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x3, 0x6}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={r1, 0x2}, &(0x7f00000000c0)) fdatasync(r0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2, 0x8}, 0x8) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:09 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) ftruncate(r1, 0xdb2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x4, 0x3fc, 0x8003, r2}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x3, 0x800d, 0x10003, 0x22, r3}, 0xffffff8a) 13:24:10 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc7, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:10 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x8) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) [ 2001.669930] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) [ 2001.710126] FAT-fs (loop5): Filesystem has been set read-only [ 2001.765236] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:10 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) [ 2001.843628] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:10 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xda, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2001.905319] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:11 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000300)=0x66, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00001a0c547a524377681f5e01000000b3997d94bc6fa1c8ea"], 0x10) setxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000400)=@sha1={0x1, "5ded029d6b1ba97b025189a075967ab85839ca03"}, 0x15, 0x3) open(&(0x7f0000000280)='./bus\x00', 0x4001, 0x100) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r2, &(0x7f0000000000), 0xfffffffffffffefd) ioctl$BLKRRPART(r1, 0x125f, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000340)=""/147, &(0x7f00000000c0)=0x93) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000440)={0x36, 0x6, 0x0, {0x1, 0x2, 0xd, 0x0, 'security.ima\x00'}}, 0x36) 13:24:11 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x20888316, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:11 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r2, 0x80, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @multicast2}}}, 0x118) fstat(r0, &(0x7f0000000040)) 13:24:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 13:24:11 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xed, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:11 executing program 4: r0 = semget$private(0x0, 0x3, 0x1) semop(r0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget$private(0x0, 0x0, 0x2) semget(0x0, 0x7, 0x400) r1 = semget$private(0x0, 0x4, 0x108) chmod(&(0x7f0000000000)='./file0\x00', 0x11) semctl$GETNCNT(r1, 0x3, 0xe, 0x0) 13:24:11 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) 13:24:11 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x113, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:11 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x20b5b417, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 13:24:11 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2040, 0x0) write$input_event(r0, &(0x7f0000000040)={{0x77359400}, 0x12, 0x4, 0x7}, 0x18) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) 13:24:11 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x198, r1, 0x510, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x361, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5bf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0xb591}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4010}, 0x48004) fchdir(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="30040000000000000000000000000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2003.201646] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:11 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x200, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0x5) ioctl$VT_DISALLOCATE(r0, 0x5608) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0x6}, 0x8) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) recvfrom$rxrpc(r0, &(0x7f0000000180)=""/216, 0xd8, 0x2002, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 2003.258989] FAT-fs (loop5): Filesystem has been set read-only 13:24:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') fsetxattr$security_smack_transmute(r1, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:11 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x126, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2003.344447] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:11 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 2003.457105] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2003.495385] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:11 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x100, 0x800) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="e80000001300140027bd7000fedbdf25646262675f70725f6374725f616573313238000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039fb5b1f684a301b7413634b74a72626000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffe0000000000000000000000002000000020000000000000000000000800010006000000bee2a95e6ccae445886624f09dea14b5a8e7ca82ac47d8"], 0xe8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) semop(0x0, &(0x7f0000000080), 0x0) semget(0x3, 0x3, 0x40) semget$private(0x0, 0x6, 0x180) semget$private(0x0, 0x3, 0x208) semget(0x3, 0x40000000000004, 0x1) r1 = semget(0x1, 0x3, 0x4) semctl$GETNCNT(r1, 0x3, 0xe, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) prctl$PR_SET_FPEXC(0xc, 0x420000007e) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'ipddp0\x00', {0x2, 0x4e24, @multicast1}}) 13:24:12 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x20e2e518, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:12 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)="9a95e5acaee254f6c44ae8871bad0fa66a89a15d330fdc7b7e678f6e8aa882061ab914ac178bcccfe0b039709db34038110d6eff8e8109a2a3790b0470a96b281b4829b46709b8a8f97bb2aae7b8e83b5006f2f34c30fdcb42de8ee8547a2a0634b97b58095b4c498c9b42eae2a69c7c84133e5e0d3602a439cf1ffd5a0b0e5325e1f0264d8d52b35aae9efc5bbbc761cd5dbe74b399411f9e", 0x99, r0}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x7f}}, 0x18) 13:24:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff39, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x4, 0x3}, 0x10) 13:24:12 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 13:24:12 executing program 2: pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:12 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x139, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:12 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r2, &(0x7f0000000000), 0x8080fffffffb) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x102, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x1f, @bearer=@l2={'ib', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x2, {0x9, 0x101, 0x80000001, 0x4, 0x7, 0x3f}, 0x408324c9, 0x6}, 0xe) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 13:24:12 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) write$P9_RLERROR(r0, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:12 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x23000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:12 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x14c, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:12 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x50000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x2c, 0x23, 0xa, 0xc, 0xa, 0xfffffffffffffffc, 0x4, 0x147, 0xffffffffffffffff}}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)=0x1002001) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, r1) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$caif_stream(0x25, 0x1, 0x5) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffff4f) socket$caif_stream(0x25, 0x1, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2004.716803] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2004.750416] FAT-fs (loop5): Filesystem has been set read-only [ 2004.786161] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:13 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000001c0)={0x1}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="120425bd7000fbdbdf25090000005c00010014000300fe80000000000000000000000000000e08000b0073697000080001000a00000008000800ffff0000080001000a000000080004004e2000000806000000000000000007000000000002000000080006006e71000008000500fdffffff"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0xc041) 13:24:13 executing program 4: semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x1a1001) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x51, "6a35acd71e1450fc4e1abf80bfd187032b71300924ef27e45cd8606ddc5da3c7ec400339b72bf7c959376c19ee9c2d086f1039f115de09eb04abee19db85a6be8e7adf9086f48d49fe8b9d838dabd3b500"}, &(0x7f00000000c0)=0x59) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0x1}, &(0x7f0000000140)=0x8) fsync(r0) ioctl$NBD_DO_IT(r0, 0xab03) renameat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 13:24:13 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x15f, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:13 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) alarm(0x7) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2004.918216] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2004.956188] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:13 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) 13:24:13 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {0x0, 0x0, 0xffffffffffffffff}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:13 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x27010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:13 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:13 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget(0x0, 0x0, 0x8) semget(0x1, 0x1, 0x0) r0 = semget$private(0x0, 0x3, 0x40) semctl$GETNCNT(r0, 0x2, 0xe, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getgid() ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x40000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0xd0d27d324d91bf78, 0x400, 0x1, 0x80800, r2}) 13:24:13 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x172, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:13 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000240)={0xabc7, "31ab4a7ff10284f3e05cae56a7f1ee3036ff3267a1001d17278884c3aa8c8d3c", 0x3, 0xded, 0x5, 0x400000, 0x200, 0x2}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4000) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000000c0)={0x2, 0x7, 0x0, 0x3, 0x100, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200202, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x2, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x5000, 0x1000}) 13:24:13 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:13 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x1, 0x0, 0x100000000}) 13:24:13 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x30000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffff3e, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:14 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x140) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0xac, 0x4, [0x2, 0xca, 0x8, 0x3]}, 0x10) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @bcast, r2}) [ 2005.665819] net_ratelimit: 26 callbacks suppressed [ 2005.665828] protocol 88fb is buggy, dev hsr_slave_0 [ 2005.675926] protocol 88fb is buggy, dev hsr_slave_1 [ 2005.686580] audit: type=1800 audit(1549545854.027:68): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=17573 res=0 13:24:14 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x600, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:14 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000005bb7c0ffffffffff020000000000000018180000", @ANYRES32=0x1, @ANYBLOB="0000000000000000180000000700000000000000050000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0xfffffffffffffff7, 0xc0, &(0x7f0000000180)=""/192, 0x41f00, 0x1, [], 0x0, 0x5}, 0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x6000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}, {@cache_loose='cache=loose'}, {@aname={'aname', 0x3d, '[$'}}, {@fscache='fscache'}, {@cache_mmap='cache=mmap'}, {@debug={'debug', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, r2}}]}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000004c0)={0x3, 0x7fff, 0x3}) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000500)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000580)="5de4de1442d3445e", 0x8}, {&(0x7f00000005c0)="5b46feaf13362c431a4432f27346191de60f21a5c204298180e9debd02129f97096ed166349a126a703d983a5b6f3c5084f3fc134808c5ad1b0ded0c71f813254b8d62dee6e98b4ed7b24393fd5b0f50f9bcd275022ebf82f602e90e8028761e6d955a272f5455ce357a1d4cb8a5d3e834f27ff74ffb75817a606cd8263769d3b6b53704a7b1ab46ecb02b83cbff57d11253d95fb44c4b027cfd3cd8fa492680c60d561d3f0b378c603c7e1d8281b7d02240c45af84dff6fa27946b4e9f3a4617a0253722b50c3bc3637617179424dfccc92863e", 0xd4}, {&(0x7f00000006c0)="f8c1cf75d07d22eca47b3cacf8b6a20b1866ef4f1fa78638a362606787dfb7c5a7560dacfddd9a0263c581d973666413d871ee7e47ae7e3399ca5df8baa878d83bbbda91c41d086f1b210cbaa705928c571fe905593765ba30cc334f1567cb29ccf3eb6014bdf20a971ab88993069da7922d1052", 0x74}, {&(0x7f0000000740)="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", 0x1000}], 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="a8000000000000000701000080000000106066d9ff84a09d97ca1e10334b9956e25a2f407131a532a508e97b470a9b83e8637fe8fa4595e10af07e074b30c5262b1eb1cfd6fb3bf0eb97f07114ef1bd8ef1850d4e8759f3032cdd1d4a58ee0df418e2be500e8da38e1bb5b8e2d5ce4cd562cd2c5f6e55d86674625019a7ec549372b6e85c1196189b0859dbf46ebe0aff417ed44b5755d39a5ee8f1eb77ff9e44987a3f2277216df24cb6a581a895350f0dec2dede9986a050000000000000000f0100000700000093459227f33a65a6115d1a7c12119ccb412c76653c45f0ac8ba5b3689e69818d421802aeecf8dcfb6b5623a14ef1c3ce"], 0xf8}, 0xc000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:14 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x34010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2006.145816] protocol 88fb is buggy, dev hsr_slave_0 [ 2006.150998] protocol 88fb is buggy, dev hsr_slave_1 [ 2006.156232] protocol 88fb is buggy, dev hsr_slave_0 [ 2006.161324] protocol 88fb is buggy, dev hsr_slave_1 13:24:14 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x10, 0x1, @in6={0xa, 0x4e20, 0x5, @rand_addr="b9263e5adc62df9bc1cbffd7818db138", 0x100000}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) shutdown(r0, 0x1) semctl$GETNCNT(0x0, 0x8000003, 0xe, 0x0) 13:24:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8000, 0x40402) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2006.341783] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2006.366567] FAT-fs (loop5): Filesystem has been set read-only [ 2006.397302] protocol 88fb is buggy, dev hsr_slave_0 [ 2006.403097] protocol 88fb is buggy, dev hsr_slave_1 [ 2006.409442] protocol 88fb is buggy, dev hsr_slave_0 [ 2006.415122] protocol 88fb is buggy, dev hsr_slave_1 [ 2006.429341] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2006.540794] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2006.578332] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:14 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:15 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x900, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/net\x00') ioctl$BLKPG(r3, 0x1269, &(0x7f0000000140)={0x1, 0x3ef50ea, 0xd2, &(0x7f0000000040)="3121d2f1b21f208b65f8ffeb477bda248263f644268fd0fb64d738d58dcc3bc6017688f50c1880af86dea207353055ad61656df5b1994e406297785b4a6985a8e0c3056ee0f2ca125509ca82c5124b4c087c8a920bfbff2012a1e2480259280ef08d6fbfe5f73c2a66776bdcae567a588e68b4308728f2c067b52fd95afb900eb761842cbad369598850a9284594eb1a1b05cb6c3fe02355f58f187e47595a145c2871a4ab33ad90d0d26a8dee46a2a75358877cfadc5e7b16491a5f78b179e984121e4753aaee453e212cc76a8cb8594095"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:15 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3d000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:15 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 13:24:15 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) setreuid(r0, r1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000017000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01c9bad10466b8c332000066ef0f01c90fae0765660f380b100f20c06635020000000f22c0660f59a03b000fc75c8a0f2333ba400066b80400000066ef", 0x3e}], 0x1, 0x1, &(0x7f0000000080)=[@cr4={0x1, 0x4000}, @efer={0x2, 0x4000}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2007.057217] audit: type=1800 audit(1549545855.397:69): pid=5505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=16961 res=0 13:24:15 executing program 2: pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x3) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000004, r0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:15 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:15 executing program 4: r0 = semget(0x3, 0x3, 0x20) r1 = syz_open_dev$adsp(&(0x7f0000001640)='/dev/adsp#\x00', 0x1ff, 0x1) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f00000017c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000016c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x500, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) semop(r0, &(0x7f0000000080), 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x28000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x510, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x40000) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x101000) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000400)={0x2, 0x5, 0x100000001, 0x7a5, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x47, 0xaf, &(0x7f0000000280)="613060f966523951b4446033ff47f7bcaf94cb9c3d209a87d9745cc59d574300476d107e47674b23b694d009a9b6e367d0883f00110cbe9250737c00e26463ee99c08c9c43988f", &(0x7f0000000300)=""/175, 0x5}, 0x28) ioctl$KVM_GET_FPU(r6, 0x81a0ae8c, &(0x7f0000000440)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000100)=0x7, 0x4) r7 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08631040", @ANYRES64=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1000, 0x0, &(0x7f0000000600)="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"}) 13:24:15 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2007.282123] *** Guest State *** [ 2007.311929] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 2007.366987] CR4: actual=0x0000000000006060, shadow=0x0000000000004020, gh_mask=ffffffffffffe871 [ 2007.432630] CR3 = 0x0000000000002000 [ 2007.461602] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 2007.486352] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 2007.537381] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 2007.596200] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 2007.602210] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 2007.707072] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 2007.715121] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2007.751523] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2007.764881] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2007.789955] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2007.812129] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2007.834588] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 2007.859849] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 2007.883001] IDTR: limit=0x000001ff, base=0x0000000000003800 13:24:16 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x10) fchdir(r0) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x346) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000100)=[0x6, 0x4, 0x9, 0x7ff, 0x6], 0x5, 0x7ff, 0x4, 0x634b80c6, 0x2, 0x8000, {0x1, 0x100000000, 0xeb, 0x200, 0x0, 0x81, 0x4, 0xf2c, 0x1000, 0x1, 0x4, 0x3, 0x0, 0x0, "e6695ea928830a703d26bd776719f9af6ca83f54173fb4dc766af2a27acc5075"}}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x73, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:16 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x1008) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001100)={r1, 0x4e, 0x80, 0x100}, &(0x7f0000001180)=0x10) fsetxattr$security_smack_entry(r2, &(0x7f0000000100)='security.SMACK64EXEC\x00', &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0xe, 0x2) 13:24:16 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = open(&(0x7f0000000100)='./file0\x00', 0x410500, 0x3) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x7000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 13:24:16 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:16 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x41010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2007.905189] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2007.928762] EFER = 0x0000000000004001 PAT = 0x0007040600070406 [ 2007.936243] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2007.943717] Interruptibility = 00000000 ActivityState = 00000000 [ 2007.978539] *** Host State *** [ 2007.991298] RIP = 0xffffffff811b3210 RSP = 0xffff88805332f8b8 13:24:16 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f00000009c0)='/dev/adsp#\x00', 0x5a6, 0x111400) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000a00)={'bcsh0\x00', 0x5}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb000, 0x0, &(0x7f0000ff5000/0xb000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x1ff, &(0x7f0000ffc000/0x3000)=nil, 0x0) [ 2008.029026] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2008.085557] FSBase=00007fe3c725a700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 2008.128366] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2008.159013] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 13:24:16 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1200, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2008.179751] FAT-fs (loop5): Filesystem has been set read-only [ 2008.205953] CR0=0000000080050033 CR3=00000000502fb000 CR4=00000000001426f0 [ 2008.215716] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2008.241397] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 2008.289383] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2008.290376] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2008.329551] *** Control State *** [ 2008.354627] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 2008.387818] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2008.402072] EntryControls=0000d1ff ExitControls=002fefff [ 2008.431429] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2008.471582] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 13:24:16 executing program 1: r0 = accept4$llc(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:24:16 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x34010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:16 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4a000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:16 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000440)={r0, r0, 0x6, 0xffffffffffffff17, &(0x7f0000000340)="a4a5fc405ace2c94759922ad26d2613d17a5ec10a9664828dc2f326195f57ea9c46748475e0980562fe5b754c2674cd8132ba6cbf5468c566a471c4288ce17f93f35ed7cb052b31f3bde63987474b01849615a04f844c0f78bc2aecd2ea16c3293688b994e69bba35105998ddf295eb0c5a53ad013b2f42f9d8ac337ff0a9fe072650ef3b30534819f0ae6504bbd36f1a78c376f34169da097fcf72107576e3e2a9aadd274e8c0095219e07e74905a5505685c16bd207739017598c113511200cc680c77ed68b4728ff8be9b09696e", 0x9, 0x2, 0xa92, 0xfffffffffffffff7, 0x2c0a4000003, 0x1, 0x3, 'syz1\x00'}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:16 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1301, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2008.486430] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 2008.494447] reason=80000021 qualification=0000000000000000 [ 2008.501516] IDTVectoring: info=00000000 errcode=00000000 [ 2008.507402] TSC Offset = 0xfffffbca729f2e43 [ 2008.511873] EPT pointer = 0x000000009b4a901e [ 2008.715885] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2008.758995] FAT-fs (loop5): Filesystem has been set read-only [ 2008.780370] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:17 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1c00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:17 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x23}, 0x3ff}}, 0x5cf6596dda51f75c, 0x2, [{{0xa, 0x4e20, 0x38, @local, 0x7}}, {{0xa, 0x4e21, 0x1, @loopback}}]}, 0x190) [ 2008.848800] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2008.866518] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2008.930906] FAT-fs (loop2): Filesystem has been set read-only [ 2008.972212] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:17 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4e010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2009.070586] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 13:24:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0xc5, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/197}, &(0x7f00000001c0)=0x78) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f00000002c0)=0x81) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) flistxattr(r3, &(0x7f0000000300), 0x0) prctl$PR_GET_DUMPABLE(0x3) 13:24:17 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2601, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:17 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x34010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:17 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x6, r0}) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f00000001c0)=0x14) 13:24:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2000, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000140)={0xffffffffffff0001, 0x3, 0xffffffffffffffff, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000300)={0xffffffff, 0x8, "eabc230d299da017c2d7ad1de2e98d059b4999366ae5a282c269063aba795a33", 0xfffffffffffffffb, 0x8, 0x0, 0x7a, 0x14}) r6 = getpgrp(0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) finit_module(r2, &(0x7f00000002c0)='selinux\x00', 0x1) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9310600000f32f20f070fc76f6dbaf80c66b8d4fedc8066efbafc0cb0d4ee0f222266b9c70a000066b80e00000066ba000000800f30f20f592366679cf40f843d8d", 0x43}], 0x1, 0x20, &(0x7f0000000280)=[@cstype0={0x4, 0x8}, @cr4={0x1, 0x200002}], 0x2) move_pages(r6, 0x9, &(0x7f0000000000)=[&(0x7f0000010000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000011000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000010000/0x4000)=nil, &(0x7f0000014000/0x2000)=nil], &(0x7f0000000080)=[0x5, 0x8, 0x624], &(0x7f00000000c0)=[0x0, 0x0], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x124, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) [ 2009.571572] audit: type=1800 audit(1549545857.907:70): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=17621 res=0 13:24:17 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2f00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:18 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x57000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:18 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x20, 0x6040) [ 2009.864559] *** Guest State *** [ 2009.885468] CR0: actual=0x0000000080000031, shadow=0x00000000e0000011, gh_mask=fffffffffffffff7 [ 2009.947056] CR4: actual=0x0000000000202062, shadow=0x0000000000200022, gh_mask=ffffffffffffe871 13:24:18 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4a000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:18 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3901, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2009.996165] CR3 = 0x0000000000002000 [ 2010.002269] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 2010.029214] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 2010.061859] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 2010.095513] CS: sel=0x0010, attr=0x0009b, limit=0x000fffff, base=0x0000000000000000 [ 2010.119349] DS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 2010.143077] SS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 13:24:18 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5b010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2010.191580] ES: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 2010.242353] FS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 2010.279371] GS: sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000 [ 2010.315597] GDTR: limit=0x000007ff, base=0x0000000000001000 13:24:18 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2010.360527] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 2010.391443] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 2010.413984] TR: sel=0x00d8, attr=0x0008b, limit=0x000001ff, base=0x0000000000003a00 [ 2010.464264] EFER = 0x0000000000000501 PAT = 0x0007040600070406 [ 2010.494919] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 13:24:18 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4a000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2010.564504] Interruptibility = 00000000 ActivityState = 00000000 [ 2010.634901] *** Host State *** 13:24:19 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x0, 0x7, 0x7, 0x2, 0x9, 0x1b948913, 0x5, {0x0, @in={{0x2, 0x4e20, @rand_addr=0xffffffff80000001}}, 0xa1d, 0x1ff, 0x3ff, 0xc671, 0x2}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={r1, 0x13f, "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"}, &(0x7f0000000500)=0x147) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x20) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000480)={0x0, 0x5, 0x40, [], &(0x7f0000000440)=0x8}) truncate(&(0x7f0000000340)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') bind$vsock_dgram(r0, &(0x7f0000000280)={0x28, 0x0, 0x2710}, 0x10) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000004c0)) [ 2010.664899] RIP = 0xffffffff811b3210 RSP = 0xffff888057f778b8 [ 2010.699749] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2010.730037] FSBase=00007fe3c725a700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 2010.748601] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 2010.767591] CR0=0000000080050033 CR3=000000004d639000 CR4=00000000001426f0 [ 2010.772568] audit: type=1800 audit(1549545859.107:71): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=17745 res=0 [ 2010.812547] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 13:24:19 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4200, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:19 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 2010.854554] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2010.903424] *** Control State *** [ 2010.925920] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 2010.958399] EntryControls=0000d3ff ExitControls=002fefff [ 2010.993551] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2011.045216] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 2011.088394] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2011.111786] reason=80000021 qualification=0000000000000000 [ 2011.139212] IDTVectoring: info=00000000 errcode=00000000 [ 2011.157603] TSC Offset = 0xfffffbc90f9221f7 [ 2011.172568] EPT pointer = 0x00000000a04ed01e 13:24:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x1172, 0xfffffffffffffffd, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r2 = dup3(r0, r1, 0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:19 executing program 2: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1200, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:19 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x64000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:19 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4c01, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sysinfo(&(0x7f0000000000)=""/142) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2011.471549] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2011.504740] FAT-fs (loop2): Filesystem has been set read-only [ 2011.607235] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 13:24:20 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x41010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:20 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget$private(0x0, 0x3, 0x580) r1 = semget(0x3, 0x0, 0x410) semctl$GETNCNT(r1, 0x4, 0xe, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 13:24:20 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x68010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:20 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x1000000000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000340)="8d1b6d01666095da0a959f11a475184adfc14cdb1dba4ea2fc5906194ef7a1a7e8d226fe0e87e7f8af28460af878b759364e5368933c911e466d7f87e2e6b396368630a288fa0859d873b42e7b158187f3eb6492b54c899a23712d342d3f897d0c4b865c3a8843a691b64620cceb02b418ae98f2683f8ffbf9dd6bac20d702d2fbbbe653f626f6dac4255e8d84cb82d38ef6cb47cfcea0ae39a9a2f3e8141b949a86dbc210d5281f7121e2e2e5c9a366808a2f606fadb88099eb42aed2319065814c8fc4dc8d049194f89ecf2eab", 0xce) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2011.905846] net_ratelimit: 26 callbacks suppressed [ 2011.905854] protocol 88fb is buggy, dev hsr_slave_0 [ 2011.915943] protocol 88fb is buggy, dev hsr_slave_1 13:24:20 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5500, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:20 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x41010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:20 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x71000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2012.385805] protocol 88fb is buggy, dev hsr_slave_0 [ 2012.390978] protocol 88fb is buggy, dev hsr_slave_1 [ 2012.396138] protocol 88fb is buggy, dev hsr_slave_0 [ 2012.401202] protocol 88fb is buggy, dev hsr_slave_1 13:24:20 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)={0x3, 0x7fffffff, 0x81, 0x0, 0x0, [], [], [], 0x6, 0xec}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:20 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5f01, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2012.555017] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2012.615581] FAT-fs (loop2): Filesystem has been set read-only [ 2012.625798] protocol 88fb is buggy, dev hsr_slave_0 [ 2012.630928] protocol 88fb is buggy, dev hsr_slave_1 [ 2012.633332] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2012.636112] protocol 88fb is buggy, dev hsr_slave_0 [ 2012.648988] protocol 88fb is buggy, dev hsr_slave_1 [ 2012.655936] FAT-fs (loop5): Filesystem has been set read-only [ 2012.699240] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2012.729429] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 13:24:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r3, 0x861, 0x7fffffff) [ 2012.749685] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:21 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8) getgroups(0x1, &(0x7f0000000840)=[0xee00]) r4 = fcntl$getown(r0, 0x9) r5 = geteuid() lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000940)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000b80)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d00)={0xffffffffffffffff, r0, 0x0, 0xc, &(0x7f0000000cc0)='cgroup.stat\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000ec0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f00)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000001000)=0xe8) r19 = getgid() r20 = getpgid(r11) getresuid(&(0x7f0000002340), &(0x7f0000002380)=0x0, &(0x7f00000023c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002400)={0x0, 0x0, 0x0}, &(0x7f0000002440)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000002480)={0x0, 0x0}) r24 = getuid() getresgid(&(0x7f00000024c0)=0x0, &(0x7f0000002500), &(0x7f0000002540)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002580)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0}, &(0x7f0000002600)=0xc) getgroups(0x9, &(0x7f0000002640)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0x0, 0xffffffffffffffff]) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002900)=0x0) fstat(r0, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000029c0)={0x0, 0x0, 0x0}, &(0x7f0000002a00)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d40)={0x0}, &(0x7f0000002d80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002dc0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000002ec0)=0xe8) getresgid(&(0x7f0000002f00), &(0x7f0000002f40), &(0x7f0000002f80)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002fc0)=0x0) fstat(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0}) r37 = getegid() r38 = fcntl$getown(r0, 0x9) getresuid(&(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000003100)=0x0) getresgid(&(0x7f0000003140), &(0x7f0000003180), &(0x7f00000031c0)=0x0) r41 = gettid() r42 = geteuid() fstat(r0, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r44 = getpid() r45 = geteuid() lstat(&(0x7f0000004700)='./file0\x00', &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r47 = getpgrp(0x0) r48 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005b40)={0x0, 0x0, 0x0}, &(0x7f0000005b80)=0xc) sendmmsg$unix(r0, &(0x7f0000005c40)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="9201e5100fd2dd6ec640b2e5aa68a0047391df7fcef274bda80d4f96647e202ba652bbc321217cf88945480f9afbdef24727cd6366876da0951a29d999beebb94551121108be41b5f7960822784e665df8d2dac7b021d5cc2e530b5172f0ef08b6170cfbe2c57f7a07ef5c817942db59d95821ee3e486e725d76f93d1ae4dcc6761eab505368b866ac24bd186475b45b70b302f76bd31ab1f2fcb55538a092bad1ba7786f59f74863a3c2e7541d4e863b64303340f796c0b457e2badb1ab821451", 0xc1}, {&(0x7f0000000240)="64bdab8eeea7abdad8043d4a6728fe7eb96a0742039be43f835d2bfea324306f8882769d265090cf5cee3b4427dc6d9d54e8e0b28786ba9f1157cb", 0x3b}, {&(0x7f0000000280)="a3bd5d3275097ce1", 0x8}, {&(0x7f00000002c0)="cd7faee0399cd742e238e0568a9c06f2ce4de5696da2d8e2330d7272cea9698886eb55d52c00b257c6b11099547d5cf92124cd44defe8e6529b9f44968acace6e2b791dc439ade8dc10118e3d6f75a2236439490dd0a257ab2ac7559aa44ff313e9a5bef02a5066e1e", 0x69}, {&(0x7f0000000340)="b796e89b76783682ec7c6909c7d7543629f7b3f5dc36ecc2e48b524442d643c551de8a85265c4579b1a57fa3e88d6f20cc7fef30a32ecaf8fb9c2688546b3615622d30aea20a188660c63206bd2441a6a7bb8d29d0bfdc80d8b530571b4f1b4bf80ce06e64cc6e5c399028a3b9b8cd404a2bf83eef72c69f5c8acfa40e08bc9c322854484f25e7f8d50bd7953096f5c9abc4d1ed71a8e694e4b3a2ca4d7aa237bab1c572d13bfb4bdd8d5f32330d", 0xae}], 0x5, &(0x7f0000000480)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18, 0x4}, {&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)="347e74e15b710edef190bc166903b4a3cbfa7061539093a44a92c254aab16a30c85896bca2c2c23bb7256f5dd817ef705482a840a97d516a40adabc5c727eb1795e2f7c731e47a69c05e4f50e2f077686c6e60029071e1967b3dd4f5941185f7ced9ce7456d8eb835518537856a079b5bbc22b1ef2e020ace5e204f77fec07cf732571e3a6728afce4", 0x89}, {&(0x7f0000000600)="057b753082b89fe4d671069636fb2b2808981082fb400911705522bf3d225e30fbfbbd6baacaf6a06399d1a9438116e2806e199443f9cba7692831b2db2bfc0a1b50023bdc74f458757d7085f9dd", 0x4e}, {&(0x7f0000000680)="6075db6949e3958ac9b01ca2234a5b46c93a7610b43c4d", 0x17}], 0x3, &(0x7f0000001040)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r10, r12, r13}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x108}, {&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="0ef40e4892625b0d93cc9a4a89bafb532a8f69f0ea4278534be78fb13838e07aa78b1bef785046f33d539597478446885109d5ecea89cb80d7fdc0c663300e2d1a56300e1017a45d2bcaf8ac3433086e943fc1c33c986a87b9a436", 0x5b}, {&(0x7f0000002280)="b1fc44db137f6dab793acd5d95b83bd634841c5219a66183276378420cafac6670b5a0e4b8c6233c6781c89ac8e55ad84dd664a8efa996c115a3638f747876dc899b6300d6701941bb288f0b9098bae710bb1f2db43232e89948748f72fffbe1663edbde1d2712c63440e051ea78541dba626887bba4eb0750f5dee944ddd3", 0x7f}], 0x3, &(0x7f0000002680)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0x90, 0x8000}, {&(0x7f0000002740)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000027c0)="69afe6cfff99b1c82eed47dc513958fb378722e351dab9fa8e973a5be18b9ca1902fc18b0b14482d366e0cae678a27ec04b3a496aa6b2df9761f8fce16c44bafe1cd548290c3317243dfb7c3a9db02887fe67979c7c0faabf6cc14e633a14e81251aa19603ab7d5fb196d6af10e9bd4c69e77ce9768d438ebfc97a7cc06c4ad56c021a38f0317eeb53167eea8753fd42adbad77417ed4c191da40f87bfa5e51cb4da6814170589ae57c394b546f4f71f74f61f851865d8548940653103e17717a7dfb8fd831aaac2026494da", 0xcc}], 0x1, &(0x7f0000002a40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0xd8, 0x800}, {&(0x7f0000002b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002bc0)="e41763ba32de4c6204c13deea56144563e4d126ad93283d32138bc132aea2cf1360e8a1787bafbbef2617f50c66bd6b0dfef59f1910671bac4561afd9619daa00d79f3785e75aefe2e8c8a5637e7644482eefe5877aab1a3a74234524e1e7ded2580df1edf50e0c34c488cb69cf107ef0595d2a67993e396fd94ca939345a27f4b063e58fc4e18e5179540a6eff522b0c01ef7d59698df6f7391b182eea0217d4090915a10", 0xa5}, {&(0x7f0000002c80)="eb6ae0c25c93efce55d7cf618792bc10197e5755a389ae9adbcda9ab5e43d096757a07a44e37567e0cf7af1b7601026c04253fb256254647567cda6913b76f4d61eae1675a52c6a0182a1ac77e5be19303589860af", 0x55}], 0x2, &(0x7f0000003200)=[@cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r38, r39, r40}], 0x78, 0x4000044}, {&(0x7f0000003280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004600)=[{&(0x7f0000003300)="e22a00c290a0cb1d79cd634bcebc587b827b1c637c760e92548df1994b60ec71f94ad03effb92c43526d55d44796ce08be53e44957f07b2710312fe047ba0d52c65ac2915705a3d1f4db7f43e5d4c156b485d469caf0f36f43f0a2cb3feb556951445f8470dd8e1fa9d8e5ae42a1adf5106d20776323ab57172e7acf88bbaedd4a8acf162c19e765820514c905ac05f5686e6cc2eb18d39511542053f9ad7c71b73aee1ca1f0c4648cc57c10b203f7bb216420d14edd13a1320ed5f724fd16d289db5710d5088e27e3bac4b2182a19e038b3568b07fd3ba7099f1a7583d161e64ffad9456410916ec587f5f8809b0207b3505d1bff", 0xf5}, {&(0x7f0000003400)="f7afd553e8c5fa75986672b9ef136003c9eb6d4f0297cbd6b0dee9f32310f192884f7d433a28aeea82f336e0b99773a4ab2e2dfe133fd84ae7a749feca8910632bb6b1d8c346ef46b370f78c8b8b43c9468d1e546127d8eca3a71e0edae4bc40c2fbcb84d8b77a3ae9971cd1fd958386b4e66fedd27d4351b76929771ab0837e14cc88a5cd3976438defdd940814a599f838acba601916beca6fdfba810cdc44f971d36aa0d40d8d87247e8641436d761fbfeefc20a359dbb587d06396", 0xbd}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f00000044c0)="45bf2e5fb3d6c505a26892ec19c5e7482b7506c651aaeca77e5154c43d374c77cb2f46fca5db336be3d69a1554a1778b5233e1d83bae25540f256dc826916d0b480d84bb214270beb5ea2cace5c028a932be703bca92cd6c2cf94837cbedfd7173320e698caf70558707b6000a0a5a1dc9052a3c9242420694592962e13cacd0c648cddfb18259861ca9", 0x8a}, {&(0x7f0000004580)="f793b19ba2d44d48a3a5a393ed45feafdb257fefb6dfd420cad944139a2a4f1f194a6e9918d413329bf92f2eae86adaf80ab10fdee2d1d9bd299488ecd8430dff5fd2c7f555a6b2223a02bfcfad9fa0c3ef04fe95fcb0aa9b34a", 0x5a}], 0x5, &(0x7f00000047c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r43, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="200000000000000001000000deffffff", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xe0}, {&(0x7f00000048c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005b00)=[{&(0x7f0000004940)="f09213c09b31374b93dff90ae8155979b2efd61e1dedb80ded344de2815e21b61479a1f0a665e570de22f481976ae2432f73bfd05f9722da5a112c7dbf801b027f6e4c405ab7406078b6b80d3e89fc7cdf246021f553f599b3de8b2c54b74c4110e7c44d5d6ada3e188a318f809051da5e722cb42fe87b844fc86f97559df2902da0a71e3be69bcbd3c3319eda1428aeabc58b4136f53cdc", 0x98}, {&(0x7f0000004a00)="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", 0x1000}, {&(0x7f0000005a00)="3c924ba8fe585b6262a25cd62c6308a21b248352d88ca399aede9808ba41eb7aa0c1bdb562b7ce5b30514041bad99da084a6dbc8779c52bf361ac414d734ed34a821f1555e43194ad042b4e22a466091a7b286edbc1abc9f5c5bcf4665b44acf45eec707dffcbee3a64d88293e2689208950d8428b649a", 0x77}, {&(0x7f0000005a80)="80f44cf783a08ff713a0c0308dc71f6c4f6e11aaf1221ecedc5143d5538c988ee5d445105be14b7ab315e0e9170424aed8ba6e2ce1bbfb23f1b594cbb2615d0a4643fa24c6fd49b0bb17782f7087cebe71dc97d30803a07b32aba067cdac63c2e6e5dce8cb07f24588403db8b5491b89efe7547872f88273cfefe8e1b26314", 0x7f}], 0x4, &(0x7f0000005bc0)=[@cred={0x20, 0x1, 0x2, r47, r48, r49}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x70, 0x20000000}], 0x7, 0x20000010) r50 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x401, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r50) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 2012.830215] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:21 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x34010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:21 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x75010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:21 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6800, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:21 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r1, 0xae80, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 13:24:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:24:21 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7e000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:22 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7201, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:22 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x34010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:22 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x490402, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x16) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000340)='./bus\x00', 0x9) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:hald_mac_exec_t:s0\x00', 0x25, 0x2) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) socket$packet(0x11, 0x2, 0x300) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:22 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x220, 0x4) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 2013.842357] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:22 executing program 1: r0 = getpgrp(0x0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x65f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x50, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r4, 0xb21, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2c8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x60}}, 0x4000004) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2013.913956] FAT-fs (loop5): Filesystem has been set read-only [ 2013.972063] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2014.049295] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2014.134576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:22 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x82010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:22 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x71000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:22 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7b00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:22 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000380)=0x3, 0x2) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockname$ax25(r1, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @default, @remote, @remote, @bcast, @bcast, @default, @rose]}, &(0x7f00000001c0)=0x48) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) unlink(&(0x7f0000000340)='./bus\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2014.763602] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:24:23 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget(0x1, 0x1, 0x542) [ 2014.806121] FAT-fs (loop2): Filesystem has been set read-only 13:24:23 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8e00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2014.862681] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 13:24:23 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8b000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:23 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x71000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2015.135201] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) sched_yield() r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000080)=""/81) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3f, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) [ 2015.201947] FAT-fs (loop5): Filesystem has been set read-only [ 2015.234586] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2015.307977] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:23 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa100, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2015.389749] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:23 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8f010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101000, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:24 executing program 2: r0 = getpgrp(0x0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x65f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x50, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r4, 0xb21, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2c8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x60}}, 0x4000004) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:24:24 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 2015.739756] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2015.795929] FAT-fs (loop5): Filesystem has been set read-only [ 2015.861749] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2015.907282] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2015.940866] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:24 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1fc, 0x6) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x100, 0x7, 0x4631}, &(0x7f00000000c0)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:24 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xb400, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:24 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x98000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:24 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc700, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @multicast1}, {0x307, @remote}, 0x20, {0x2, 0x4e23, @rand_addr=0x6}, 'nr0\x00'}) r4 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x7, 0x1) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000440)={0x0, 0x7530}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:24 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c74000204010002aa19f3090000005cde9227f99f79f487000270fff83681816c1e3857dca82591235877c5a69219342ab9823e14ebbd220615ac3d15b0ea9a0767ebabd15983a6dd06d7f85f66da0ca338", 0x53}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:24 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x9c010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:25 executing program 2: r0 = getpgrp(0x0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x65f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x50, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r4, 0xb21, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2c8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x60}}, 0x4000004) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:24:25 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x94, 0x40000) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x1b, 0x4, 0x7fffffff, 0x0, 0xfffffffffffffff8}, 0x10) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r1 = semget(0x2, 0x3, 0x4) semop(r1, &(0x7f0000000000)=[{0x3, 0x3f, 0x1000}, {0x2, 0x1, 0x800}, {0x1, 0x3, 0x1000}, {0x6, 0xfffffffffffffbff, 0x800}, {0x3, 0x400, 0x1000}, {0x1, 0xae, 0x1800}, {0x1, 0x0, 0x800}, {0x0, 0xfffffffffffffff9}], 0x8) 13:24:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg(r3, &(0x7f00000006c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="6521ee563f412269f7bf86ff5a7554870cdbc009eb6dbd9ebb45edde333d8a7aebba7c15c5f10c2108eb3fe594561efdea5b865026597f34662a8c5320c02bd47eba51915dcc7492065834189652c0fa4807cb882a4149d1ebbfe4ce6d22d1ef9018d18a6b4925a561bc7f1796d826c8f258ab1133add45db725416561fff3cfe70c424c970c61c11eaba5f0304c954b6cdcf61fac9201870c45f33e858407a13dbd4377062c8729e85488466cf6ee439887257a8f2325040f27a5ceabbdd623fb210adae9149c2ae472b3345c11a2de3339ddd75cf221d754a666943301af6d610f96", 0xe3}, {&(0x7f0000000180)="8a5b6ffab7d9321a65a45e3653ab6f3c7757a6b89f3a6f14f6825a20094805ecb7739a3571cf27e9579333b7caf19f8a07fb5035c636ad6d1e903ca666e5d79361a7759aa27ac83349cbaa066dbad85385", 0x51}, {&(0x7f0000000340)="6b0fda739b832399bff02fa7f764aa7ffb1af5a88e4e23964d488f4511557d61d9c838bb88f5f518e2ceea954dcef1cfe8faeb8a3e09bf1169295965b1accac208eb09bbda7fdeee930e0c47ffd702263f65ae873c6021bef8fea0b99cad66f502d4ee6e6c94c49bcb8d5ee8e36ed05fc985f85cb5e4b6f86a107560596ebf941c3158a7986e4b7aaf3731ea4153c6236f87d67ae46df6c88ec2f0142d2c36a9077bd7c4cb7ba0165088656175742bc7731c8093286a", 0xb6}, {&(0x7f0000000440)="4f0ef8f0c8a76bc881a7f335686489b54546183a50d0381c758145bb579c240c1ba03126aac621ca15da27fef1893b71237b2dce3346bf0d229706d051aef420b853c7d778688bde07af44a9ff4cb3a50a03242f230c3aa8b22f867e8cc66378650228b408adb10786353f8bf47011ec8d8ab1ae08150461343d8c4295d0b621ce3ca8330913deae1c3875042ac33b272e1a6686", 0x94}], 0x4, &(0x7f0000000540)=[{0x50, 0x0, 0x1, "b9678b7c66018f796025da5cba1b734f56cb154ba2059b0e9926af68b49b9024f5cea7bacf2db52e37a8ca4b46fd8882d55a9b05bb2b3eacb2097f708bc6"}, {0x18, 0x108, 0x7, "89d186ca49cb79"}, {0xf0, 0x111, 0x5, "9938c76d0f37579636fd1b66e981ba1e05f8a1883466275c729a7b9522d91c2fb235789536cdef890444696b1c4a777607c8335769b679a6fef52f3c5b0b1c795626277d05312a6613ce169d0422daac54402346743261449f5c09de2246732064102215e908359f5f15477a7bd6dcac7418c72609d8adcfac7e51b99c4f3e1f812f6f8dd2bfac3a038c1891adfe3ddb3a0ea15c1d7f3b379cf9619d4fa9a3b659764f8141ae3030f50082a0f3c9700319820fddabdc5d9a566d615ef026e5fda96e08b4297f5168bbde9bdc6bc904de634655afa55ecc7e5f0f8a"}], 0x158}}], 0x1, 0x880) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd9, 0x0, 0x0, 0xfffffffffffffdba) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x3, 0x0, @pic={0x80, 0x1, 0x1, 0x4, 0x4, 0x3, 0x4, 0x1, 0x3ff, 0x6739, 0x6, 0x100000000, 0x2, 0x1, 0x8, 0x5}}) 13:24:25 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xda00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2016.911977] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2016.989671] FAT-fs (loop5): Filesystem has been set read-only [ 2017.031430] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2017.110824] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fadvise64(r0, 0x0, 0x40, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2017.197811] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:25 executing program 2: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc700, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:25 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa01e1c17, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:25 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xed00, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$int_out(r1, 0x5460, &(0x7f0000000100)) poll(&(0x7f00000000c0)=[{r1, 0xc430}, {r0, 0xc200}, {r0, 0x4}], 0x3, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400002, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0x4, @mcast1, 0x1}, {0xa, 0x4e24, 0x7fffffff, @mcast1, 0x8}, 0x80, [0x7, 0x80000000, 0x4, 0xf9, 0xcdc, 0xaea2, 0x4, 0x9]}, 0x5c) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) poll(&(0x7f0000000040)=[{r3, 0x1200}, {r3, 0x2}, {r1, 0x10}, {r3}, {r0, 0x2}, {r0, 0x1010}], 0x6, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) 13:24:26 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x2, 0x87, 0x82, 0x3, 0xecb}, 0x2b, "21708a91c02b9864dd0beb9c08e762aacd3ae1ece4790181c21df8af563e054865ca96b9338422845bf9b9"}, 0x3d) 13:24:26 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xff0f, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:26 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="04001a1ca75f0e82547a524377681f5e01000080"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x100) sendfile(r2, r1, &(0x7f0000000000), 0x808100000001) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$KDDISABIO(r1, 0x4b37) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:26 executing program 2: r0 = getpgrp(0x0) ptrace$poke(0x5, r0, &(0x7f0000000000), 0x65f) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x50, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r4, 0xb21, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf2c8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x60}}, 0x4000004) getdents64(r2, &(0x7f00000002c0)=""/4096, 0x1000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:24:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:26 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa04b4d18, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2018.145845] net_ratelimit: 26 callbacks suppressed [ 2018.145852] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.155988] protocol 88fb is buggy, dev hsr_slave_1 13:24:26 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1517f, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2018.413114] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x2, 0x47}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2018.456801] FAT-fs (loop5): Filesystem has been set read-only [ 2018.480235] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:26 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f0000000380)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x100}, 0x8) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c546a524377681f5e01000020"], 0x10) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x4, 0x4, 0x2, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={r4, 0x10000}, 0x8) [ 2018.521941] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2018.583310] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:27 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa0787e19, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:27 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget$private(0x0, 0x3, 0x20) semget(0x0, 0x1, 0x200) r0 = semget$private(0x0, 0x7, 0x48) semctl$GETNCNT(r0, 0x2, 0xe, 0x0) 13:24:27 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:27 executing program 2: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="04001a1ca75f0e82547a524377681f5e01000080"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x100) sendfile(r2, r1, &(0x7f0000000000), 0x808100000001) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$KDDISABIO(r1, 0x4b37) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2018.625805] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.630924] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.636117] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.641218] protocol 88fb is buggy, dev hsr_slave_1 13:24:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x240042) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) [ 2018.848958] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2018.865907] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.871146] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.876322] protocol 88fb is buggy, dev hsr_slave_0 [ 2018.881399] protocol 88fb is buggy, dev hsr_slave_1 [ 2018.896072] FAT-fs (loop2): Filesystem has been set read-only [ 2018.957204] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 13:24:27 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2069791c, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:27 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:27 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa0a5af1a, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x80180) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000040)={0xb2, 0x3ff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:27 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2019.511473] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2019.542584] FAT-fs (loop5): Filesystem has been set read-only 13:24:27 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x2000000, 0x19c) mkdirat(r0, 0x0, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open$dir(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000ef8e"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x802, @rand_addr="d0ca338d2817a4d9563fb4b1164e07e3"}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/148) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x7}) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 2019.615279] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2019.704554] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2019.779537] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:28 executing program 0: pipe(&(0x7f0000000280)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x800, 0x8, 0x981, 0x4, 0xfffffffffffffffb, 0x6}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00001ac2d67a3e1e77681f5e01000000c36d20630ded680633287949a02ca165846a4b9af98eae9826cb78aa1e07723259a2eb44"], 0x10) r2 = perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) ioctl$TCSBRKP(r0, 0x5425, 0x91a) unlink(&(0x7f0000001e00)='./bus\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000440)="a305dee182a7f8085a2ca71950ee17cc0e07ec75622fdedc49e5916e300af91be254ae9c0024a27f64f186bab27c9625e768ee70d23d6e9878310e484136bb8180dcf1e80008c9a0dab1add4ca469550ac851846253103d3442cb2c21cd606ad19d8ba6c8813e683ab25818beaa2fcf25302015f8180966e84cb1707d3990299a9a7378f731eb89a44286e53692af29398271c907f77a8786b41fa878f45684d06d16880e34bf667572700b6f633a5230c5722106a1dc6abb79bb3d4f3835110afeac495565e1c71fe2df5d196858a48691807f1b9b16250530d713bd22296", &(0x7f0000000580)=""/250}, 0x18) write$binfmt_aout(r2, &(0x7f0000000300)={{0x107, 0xc783, 0x70c4, 0x108, 0x280, 0x3f, 0x2ed, 0xf989}, "3cbd016caacbf243754a36b95e679e993a526d4375ac3e7e82932152b9c388951d300ab2a94bfde358a8ba1e8da8df3098352b05b579d21f5c8227d5af95ed50cb273258e780c91ab2d45537fcdc28a4ffa4030aee5c635cf971bee5afe6881b3a7abcf5a784c1aeaa9e8f0bab77c53575e341600cde0123db72a69a7318e9372350b0784317660ed72760c59d567458dc83f782eebf619c8a7741def8028c16d2104f16a85e013bf1353bc14c267c7e562ecc4240beb869176bcf11ebcae5e3bff4812f6842c5e89699ec8abf927522e28dff241f7d7b30e4b7471cf2fa1606141274418246"}, 0x106) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl(r2, 0x6, &(0x7f00000001c0)="edbd249c27cc8ebd8427781f62ba887ae5582bf08656a0a9ee0b4e07141f89c1") 13:24:28 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x76, "9349cc6b4fe52a8f7bea1bcd70aeaad91437c3fa816b92785fe2ae4138f6d377b2dbea4a5ddb2204c07b256ac43a16d6ab08cdfe637398f763a378d1e36a503db4e565ae7b8b09f7e6ca1a78923205d221778432c76de50d251afc00c9778ab7b6db7a655b3cd33320bf3fb6583afcdfe798a453af75"}, &(0x7f0000000040)=0x7e) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7f, 0x3ff, 0x8, 0x6, 0x372, 0x8000, 0x80000000, 0x717, r1}, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x6a13e5769112356, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000280)={@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, {&(0x7f00000001c0)=""/91, 0x5b}, &(0x7f0000000240), 0x10}, 0xa0) 13:24:28 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa0f1ea15, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x2, 0x1b, 0x1, "8c18c3c1f0572f1147d2f86eb2d1480ca3411ce81a1dd703f09ccffe7361125e0ab3d2ee50f3ec9cc3cbf4126b56888be5465843fb5a6f4f2aa6bd6d0c98cb5f", "3a28bff4036d1227b9feb4ebb977f19d38a4d1f51a4fd203e823b2871bff2eeef4ee69e8606ec915d204a5c00df474ad32c67ba597389bf293a1136619043eec", "6d8f00ecb762d12c3904c97595d6aef2b67361eadd5072321383f59d30076d5a", [0x4, 0x3]}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 13:24:28 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:28 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x2000000, 0x19c) mkdirat(r0, 0x0, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open$dir(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000ef8e"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x802, @rand_addr="d0ca338d2817a4d9563fb4b1164e07e3"}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/148) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x7}) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:28 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x7e, 0x6f, 0x2, {0x9, [{0x80, 0x4, 0x3}, {0x46, 0x3, 0x4}, {0x1, 0x0, 0x7}, {0x86, 0x2, 0x8}, {0x4a, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x0, 0x2, 0x3}, {0x0, 0x1, 0x8}, {0xc, 0x3, 0x4}]}}, 0x7e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/protocols\x00') write$P9_RLINK(r5, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2020.391901] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 13:24:28 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa5000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:28 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x9000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:29 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x2000000, 0x19c) mkdirat(r0, 0x0, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open$dir(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000ef8e"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x802, @rand_addr="d0ca338d2817a4d9563fb4b1164e07e3"}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/148) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x7}) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 2020.610099] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2020.620569] FAT-fs (loop5): Filesystem has been set read-only [ 2020.702066] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffca3, 0x0, 0x0, 0x186) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2020.790389] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2020.838335] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:29 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa9010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:29 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:29 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget(0x1, 0x2, 0x20) semctl$GETNCNT(r0, 0x3, 0xe, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200400, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="674466980100000003000300020000001459c148a28ec0466e106156a1c29df386e4f8c5e06e6d1bba18d1a4c8fa1411a02f9643aa6f064342b5b1477c12f04e8d14dca6aa619a34b3399689edc1e6fdc4fe7ede836ac0b0c5dd33258b966fe28b736ad3d4ada5db703c64834634d94e0b19c13f7125c4e4f449d11e31b655872d5a457cc91ec3b6"], 0x32) 13:24:29 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x420200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x6, @tick, 0xb1, {0x8, 0x5ddb}, 0x81}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:29 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa0a5af1a, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:29 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xb2000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:29 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = shmget(0x1, 0x1000, 0x200, &(0x7f0000009000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) flock(r1, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe3, 0x40) ioctl$TIOCSBRK(r4, 0x5427) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:24:29 executing program 2: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa0a5af1a, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:30 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x10000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:30 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget(0x2, 0x4, 0x0) semget(0x0, 0x1, 0x2) r0 = semget(0x1, 0x3, 0x0) semctl$GETNCNT(r0, 0x7, 0xe, 0x0) 13:24:30 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x100, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) sendto(r2, &(0x7f0000000240)="dbcf6c84b1dc898205b80c7adfc20ae48cabcda03f8ba41838b80259a4b8528760077f66aa6d43b5a840db1b6e185767197022f5c8f8a0ce47fa5570850ff947c827e07206ac10bf566a1ac70025875ec60da3a3fc07f94fa83c8ab23fefe21f3f410da576d2dfe6b90e9cd1230e17851350520f4dadb4586cd8621048c50b5e28", 0x81, 0x20000000, &(0x7f0000000300)=@llc={0x1a, 0x312, 0x80000000, 0x100000001, 0x4, 0x208fa6ad, @link_local}, 0x80) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2000, &(0x7f000000d000/0x2000)=nil}) r5 = fcntl$getown(r1, 0x9) fcntl$setownex(r4, 0xf, &(0x7f0000000180)={0x1, r5}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) select(0x40, &(0x7f0000000080)={0x8, 0xbe4, 0x1f, 0x626, 0x4, 0x9, 0x0, 0x9}, &(0x7f00000000c0)={0x9a83, 0x401, 0x0, 0x9, 0x2, 0xfffffffffffffd4b, 0x5, 0x80}, &(0x7f0000000100)={0x10000, 0x600, 0x10000, 0x2, 0x5, 0x7, 0x1ff, 0x173}, &(0x7f0000000140)={0x77359400}) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000000)={0xffffffffffff29cc, 0x3ff, 0xa, 0x500}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:24:30 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0x4}) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:30 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xb6010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:30 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x12000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:30 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x2000000, 0x19c) mkdirat(r0, 0x0, 0x10) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) open$dir(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000ef8e"], 0x8) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x802, @rand_addr="d0ca338d2817a4d9563fb4b1164e07e3"}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000380)=""/148) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x4) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x7}) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 13:24:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x301010, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:31 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x13010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000080)={0x0, 0x200, 0x301f, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:31 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 13:24:31 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x4}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 13:24:31 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xbf000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:31 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e00000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x0, 0x0) 13:24:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x1) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r2) 13:24:31 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1c000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2023.364432] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2023.430534] FAT-fs (loop5): Filesystem has been set read-only [ 2023.459092] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xebfab53f78c77096, 0x0) sendfile(r2, r1, &(0x7f0000000080), 0x235) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000040)) 13:24:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000100)="f4", 0x1) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x20a, 0x0, 0x0) [ 2023.591793] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:32 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x26010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2023.652330] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:32 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc3010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:32 executing program 2: sched_setaffinity(0x0, 0x5, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x100000000000015d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getgid() 13:24:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xdb6c, 0x401c0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x4) 13:24:32 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x4300) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) semop(0x0, &(0x7f0000000000), 0x65) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x20) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:32 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) [ 2024.385852] net_ratelimit: 26 callbacks suppressed [ 2024.385860] protocol 88fb is buggy, dev hsr_slave_0 [ 2024.395960] protocol 88fb is buggy, dev hsr_slave_1 13:24:32 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001a1c54954377681f5e0100"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:32 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2f000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:32 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x7, 0xe, 0x0) 13:24:32 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xcc000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2024.589023] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2024.621614] FAT-fs (loop5): Filesystem has been set read-only [ 2024.683200] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:33 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x39010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2024.758743] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0xfffffffffffffffc, 0x6, '9P2000'}, 0x13) [ 2024.807444] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2024.865907] protocol 88fb is buggy, dev hsr_slave_0 [ 2024.871041] protocol 88fb is buggy, dev hsr_slave_1 [ 2024.876204] protocol 88fb is buggy, dev hsr_slave_0 [ 2024.881269] protocol 88fb is buggy, dev hsr_slave_1 13:24:33 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd0010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:33 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 13:24:33 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2025.105916] protocol 88fb is buggy, dev hsr_slave_0 [ 2025.111140] protocol 88fb is buggy, dev hsr_slave_1 [ 2025.116355] protocol 88fb is buggy, dev hsr_slave_0 [ 2025.121445] protocol 88fb is buggy, dev hsr_slave_1 13:24:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r3 = dup3(r0, r2, 0x80000) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000000)='/dev/kvm\x00', 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:33 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000000c0)) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {0x4}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:34 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="bae72ce91721833dd61a48d38ffb26a4ba01220286695194cf50ccad34d2d52e91", 0x21, 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:34 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x42000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:34 executing program 4: semget(0x1, 0x0, 0x108) semget(0x0, 0x2, 0x80) semget(0x2, 0x0, 0x0) r0 = semget(0x3, 0x3, 0x10) semop(r0, &(0x7f0000000080)=[{0x2, 0x7a, 0x1000}, {0x0, 0x0, 0xfffffffffffffffc}], 0x2aaaaaaaaaaaad74) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:34 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 13:24:34 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd9000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2026.289956] attempt to access beyond end of device [ 2026.295346] loop2: rw=1, want=130, limit=112 [ 2026.348053] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2026.385818] attempt to access beyond end of device [ 2026.390768] loop2: rw=1, want=131, limit=112 13:24:34 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) [ 2026.395184] Buffer I/O error on dev loop2, logical block 130, lost async page write 13:24:34 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4c010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2026.439505] attempt to access beyond end of device [ 2026.458369] loop2: rw=1, want=132, limit=112 [ 2026.462798] Buffer I/O error on dev loop2, logical block 131, lost async page write 13:24:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2026.529216] attempt to access beyond end of device [ 2026.534210] loop2: rw=1, want=133, limit=112 [ 2026.569310] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2026.618717] attempt to access beyond end of device [ 2026.639900] loop2: rw=1, want=142, limit=112 13:24:35 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xdd010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2026.667325] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 2026.694534] attempt to access beyond end of device [ 2026.714669] loop2: rw=1, want=143, limit=112 [ 2026.732049] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 2026.783444] attempt to access beyond end of device [ 2026.808640] loop2: rw=1, want=144, limit=112 [ 2026.831200] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 2026.867654] attempt to access beyond end of device [ 2026.910797] loop2: rw=1, want=145, limit=112 [ 2026.941083] Buffer I/O error on dev loop2, logical block 144, lost async page write 13:24:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)="10c21bfa691435d911497242359135d8a8a33882b27a9a30280efddbbaa7b70c003eaa92447734faabf80d2e44a2a1ed674cef1220d36a5bc86ba83984f16da04d69e82a4c590db9a09c017914451d25876adc552950c6ad6f18091a6c652c63f15815f03adf54387521d3666ee1b0dc525181668a1148d83738e095e6e0091f0654189e3d655cf31997cf2a169f9449233991908973011850b2dbb988f35f13052c612b6c70f30f9ffe6fed2c44a98fd8701152ad409c2f54058235a7e630c93b75f97843c8dda0d3166cfc73f8aec20bec0cdfeed907052c32a8357cfe0d7993fed62f2172eb0c346fcf", 0xeb, 0x76c}, {&(0x7f0000000140)="3583ba3e6b91e56f2dd1d3dde7a3c273024570b0e2c50f9265ed20d4b03d73df12c122342b77fc65ea7882aab002517649827a0836409135538d741e6f8e015b865fcfa0ced6ef033df4ee4540a452f12967027563c783bce356621b08475847eeb255d23e1a41278ce641f75faf133bb138f98fdcba596a5ff54818bba4ec56ed8ff7d51e567cc093211b5a5ec544118f6f98ba70984ba5c020ce653398785c4ec96e4153bc3227fbe5f080028f03707dd47d51", 0xb4, 0x3}], 0x10, &(0x7f0000000440)={[{@creator={'creator', 0x3d, "b2d2bca8"}}, {@umask={'umask', 0x3d, 0x8001}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@quiet='quiet'}, {@umask={'umask', 0x3d, 0x7}}, {@file_umask={'file_umask'}}, {@gid={'gid', 0x3d, r3}}, {@type={'type', 0x3d, "46dc4926"}}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@umask={'umask', 0x3d, 0x2}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = accept4(r1, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80, 0x800) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x4b, 0x4) [ 2027.011519] audit: type=1800 audit(1549545875.347:72): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=17689 res=0 [ 2027.026328] attempt to access beyond end of device 13:24:35 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x55000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2027.063644] loop2: rw=1, want=4241, limit=112 [ 2027.130474] attempt to access beyond end of device [ 2027.150524] loop2: rw=1, want=8337, limit=112 [ 2027.183541] attempt to access beyond end of device [ 2027.202984] hfs: can't find a HFS filesystem on dev loop1 [ 2027.213204] loop2: rw=1, want=8729, limit=112 [ 2027.237632] attempt to access beyond end of device [ 2027.263003] loop2: rw=1, want=8758, limit=112 [ 2027.280614] Buffer I/O error on dev loop2, logical block 8757, lost async page write [ 2027.309722] attempt to access beyond end of device [ 2027.325043] loop2: rw=1, want=8759, limit=112 [ 2027.334356] hfs: can't find a HFS filesystem on dev loop1 [ 2027.345942] Buffer I/O error on dev loop2, logical block 8758, lost async page write [ 2027.398953] attempt to access beyond end of device [ 2027.408465] loop2: rw=1, want=8760, limit=112 [ 2027.417538] attempt to access beyond end of device [ 2027.430304] loop2: rw=1, want=8761, limit=112 [ 2027.441906] attempt to access beyond end of device [ 2027.461556] loop2: rw=1, want=8782, limit=112 [ 2027.496336] attempt to access beyond end of device [ 2027.501367] loop2: rw=1, want=8783, limit=112 [ 2027.515899] attempt to access beyond end of device [ 2027.521172] loop2: rw=1, want=8784, limit=112 [ 2027.530397] attempt to access beyond end of device [ 2027.539875] loop2: rw=1, want=8785, limit=112 [ 2027.550140] attempt to access beyond end of device [ 2027.560741] loop2: rw=1, want=8834, limit=112 [ 2027.569850] attempt to access beyond end of device [ 2027.580429] loop2: rw=1, want=8835, limit=112 13:24:35 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100010034a2000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000240)=0x20) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000100)={0x3, 0x5}) unlink(&(0x7f00000001c0)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:35 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xe6000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:35 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5f010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:35 executing program 4: semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x101202, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f00000004c0)={0x8, 0x3, 0x5, 0x18}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x204000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x4, @addr=0x3}, "c5507f8b1d405b29566ea56bbe010171947fac4ba7218c822e4672291390d6f0", 0x1}) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) write$P9_RREMOVE(r2, &(0x7f0000000380)={0x7, 0x7b, 0x2}, 0x7) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x12102, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000340)=0x2, 0x4) r6 = eventfd2(0x9, 0x80001) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r7 = dup2(r5, r6) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) set_thread_area(&(0x7f0000000080)={0x81, 0x1000, 0xe52989b3a73a901, 0xfffffffffffffeff, 0x7, 0x7ff, 0x10001, 0xffffffff, 0xf, 0x6}) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1e) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000000100)=0x8) [ 2027.606719] attempt to access beyond end of device [ 2027.611678] loop2: rw=1, want=8836, limit=112 [ 2027.616344] attempt to access beyond end of device [ 2027.621291] loop2: rw=1, want=8837, limit=112 [ 2027.669663] attempt to access beyond end of device [ 2027.678069] loop2: rw=1, want=8846, limit=112 [ 2027.682619] attempt to access beyond end of device [ 2027.723373] loop2: rw=1, want=8847, limit=112 [ 2027.746059] attempt to access beyond end of device [ 2027.755985] loop2: rw=1, want=8848, limit=112 [ 2027.760343] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2027.760546] FAT-fs (loop5): Filesystem has been set read-only [ 2027.832125] attempt to access beyond end of device [ 2027.845566] loop2: rw=1, want=8849, limit=112 [ 2027.851326] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2027.882927] attempt to access beyond end of device [ 2027.894721] loop2: rw=1, want=12945, limit=112 [ 2027.925294] attempt to access beyond end of device [ 2027.937055] loop2: rw=1, want=17041, limit=112 [ 2027.955316] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2027.977080] attempt to access beyond end of device [ 2027.989996] loop2: rw=1, want=21137, limit=112 [ 2028.001763] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2028.032612] attempt to access beyond end of device [ 2028.048798] loop2: rw=1, want=25233, limit=112 [ 2028.091289] attempt to access beyond end of device [ 2028.101855] loop2: rw=1, want=29329, limit=112 [ 2028.133360] attempt to access beyond end of device [ 2028.168286] loop2: rw=1, want=32993, limit=112 13:24:37 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 13:24:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:37 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x1, 0x80}, {}], 0x1c89998352a340b1) r0 = syz_open_dev$admmidi(&(0x7f0000001200)='/dev/admmidi#\x00', 0x100000000, 0x20003) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001480)=ANY=[@ANYBLOB="fe000000d3000000cec694b8031139fea647bc936c64911586c58e420129562d29e4f9c26fe5a4192c4dfc794e85d6e2aeef13bdf411483745196bfc17ee59a13f8391c47a5e1d3725f3d73612a07b0c0ed1a90e1ef3ea2521cac0d96c8ec0855df10e93fa27d94cddfcaa6d238025f639681acd10b2edd3703b974f97f6f2edc32a9dcdb978d8fef51e01983cf5350908061e1a16b28ceb4f4ad6c9f7e8c4397c1294975d62d3128f6c762d026e08242b6c1dea8cc6066f3666cc928eb21dfff10cd4652459cb1275fdfac2a79151ea8b84c3178caa8b8484dc65"]) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000001300)={0x1, 0x0, 0x10000, 0x3}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001340)={0xc0000000000000, r2, 0x10001, 0x7f}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000001280)={0x6, r3}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000040)={0x4, 0x3, 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0xb8, &(0x7f00000010c0)=""/184, 0x59, &(0x7f0000001180)=""/89}) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:37 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x68000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:37 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xea010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:37 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x400000) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2029.598037] attempt to access beyond end of device [ 2029.603039] loop2: rw=1, want=130, limit=112 [ 2029.658016] attempt to access beyond end of device [ 2029.691780] loop2: rw=1, want=131, limit=112 13:24:38 executing program 4: r0 = semget$private(0x0, 0x2, 0x72) semop(r0, &(0x7f0000000000)=[{0x0, 0x80}, {0x0, 0x0, 0x7fe}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 2029.726068] attempt to access beyond end of device [ 2029.774059] loop2: rw=1, want=132, limit=112 [ 2029.797772] attempt to access beyond end of device 13:24:38 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf3000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:38 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x72010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2029.824860] loop2: rw=1, want=133, limit=112 [ 2029.842099] attempt to access beyond end of device [ 2029.851429] loop2: rw=1, want=142, limit=112 [ 2029.857923] attempt to access beyond end of device [ 2029.863071] loop2: rw=1, want=143, limit=112 [ 2029.867794] attempt to access beyond end of device 13:24:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f000000b000/0x2000)=nil}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xfffffffffffffffe, 0x80]}, &(0x7f0000000080)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2029.873225] loop2: rw=1, want=144, limit=112 [ 2029.878147] attempt to access beyond end of device [ 2029.883326] loop2: rw=1, want=145, limit=112 [ 2029.895424] attempt to access beyond end of device [ 2029.908412] loop2: rw=1, want=4241, limit=112 [ 2029.951284] attempt to access beyond end of device [ 2029.983526] loop2: rw=1, want=8337, limit=112 [ 2030.065305] attempt to access beyond end of device [ 2030.106126] loop2: rw=1, want=12057, limit=112 [ 2030.120855] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2030.147038] attempt to access beyond end of device 13:24:38 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7b000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2030.198892] loop2: rw=1, want=12086, limit=112 [ 2030.205107] FAT-fs (loop5): Filesystem has been set read-only [ 2030.232315] attempt to access beyond end of device [ 2030.264534] loop2: rw=1, want=12087, limit=112 [ 2030.278857] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2030.306878] attempt to access beyond end of device 13:24:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc332}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x5) [ 2030.330447] loop2: rw=1, want=12088, limit=112 [ 2030.348292] attempt to access beyond end of device [ 2030.369804] loop2: rw=1, want=12089, limit=112 [ 2030.385612] attempt to access beyond end of device [ 2030.394377] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2030.411074] loop2: rw=1, want=12110, limit=112 [ 2030.424885] attempt to access beyond end of device [ 2030.451769] loop2: rw=1, want=12111, limit=112 [ 2030.463068] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2030.480769] attempt to access beyond end of device [ 2030.497063] loop2: rw=1, want=12112, limit=112 [ 2030.512357] attempt to access beyond end of device [ 2030.525620] loop2: rw=1, want=12113, limit=112 [ 2030.541985] attempt to access beyond end of device [ 2030.557681] loop2: rw=1, want=12162, limit=112 [ 2030.588544] attempt to access beyond end of device [ 2030.593495] loop2: rw=1, want=12163, limit=112 [ 2030.625855] net_ratelimit: 26 callbacks suppressed [ 2030.625863] protocol 88fb is buggy, dev hsr_slave_0 [ 2030.635913] protocol 88fb is buggy, dev hsr_slave_1 [ 2030.648572] attempt to access beyond end of device [ 2030.653516] loop2: rw=1, want=12164, limit=112 [ 2030.662034] attempt to access beyond end of device [ 2030.679538] loop2: rw=1, want=12165, limit=112 [ 2030.684163] attempt to access beyond end of device [ 2030.707664] loop2: rw=1, want=12174, limit=112 [ 2030.712284] attempt to access beyond end of device [ 2030.740414] loop2: rw=1, want=12175, limit=112 [ 2030.745065] attempt to access beyond end of device [ 2030.759565] loop2: rw=1, want=12176, limit=112 [ 2030.764193] attempt to access beyond end of device [ 2030.787830] loop2: rw=1, want=12177, limit=112 [ 2030.821993] attempt to access beyond end of device [ 2030.828933] loop2: rw=1, want=16273, limit=112 [ 2030.865651] attempt to access beyond end of device [ 2030.901432] loop2: rw=1, want=20369, limit=112 [ 2030.935187] attempt to access beyond end of device [ 2030.940297] loop2: rw=1, want=24465, limit=112 [ 2030.959963] attempt to access beyond end of device [ 2030.964916] loop2: rw=1, want=28561, limit=112 [ 2030.975004] attempt to access beyond end of device [ 2030.980035] loop2: rw=1, want=30313, limit=112 [ 2031.105886] protocol 88fb is buggy, dev hsr_slave_0 [ 2031.111012] protocol 88fb is buggy, dev hsr_slave_1 [ 2031.116171] protocol 88fb is buggy, dev hsr_slave_0 [ 2031.121233] protocol 88fb is buggy, dev hsr_slave_1 [ 2031.345828] protocol 88fb is buggy, dev hsr_slave_0 [ 2031.350964] protocol 88fb is buggy, dev hsr_slave_1 [ 2031.356191] protocol 88fb is buggy, dev hsr_slave_0 [ 2031.361276] protocol 88fb is buggy, dev hsr_slave_1 13:24:40 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 13:24:40 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf7010000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:40 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7f510100, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x80000000006e42, 0x800) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0xb2, 0xf96, 0x1, 0xffffffff, 0x40}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) fcntl$setsig(r0, 0xa, 0x14) 13:24:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x191000) 13:24:40 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)='vfat\x00', 0x5, 0x3) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0xfffffffffffffe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x40) unlink(&(0x7f0000001e00)='./bus\x00') socket$vsock_dgram(0x28, 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2032.302222] attempt to access beyond end of device [ 2032.319922] loop2: rw=1, want=130, limit=112 [ 2032.332254] buffer_io_error: 38 callbacks suppressed [ 2032.332264] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2032.363425] attempt to access beyond end of device [ 2032.377094] loop2: rw=1, want=131, limit=112 [ 2032.391569] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2032.420037] attempt to access beyond end of device [ 2032.439789] loop2: rw=1, want=132, limit=112 [ 2032.455051] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2032.480288] attempt to access beyond end of device [ 2032.499631] loop2: rw=1, want=133, limit=112 [ 2032.510418] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2032.534313] attempt to access beyond end of device 13:24:40 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x8e000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2032.559392] loop2: rw=1, want=142, limit=112 [ 2032.574074] Buffer I/O error on dev loop2, logical block 141, lost async page write 13:24:40 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffff0f, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2032.617918] attempt to access beyond end of device [ 2032.643027] loop2: rw=1, want=143, limit=112 [ 2032.658945] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 2032.697459] attempt to access beyond end of device [ 2032.714782] loop2: rw=1, want=144, limit=112 [ 2032.729979] Buffer I/O error on dev loop2, logical block 143, lost async page write 13:24:41 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xa1000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2032.774063] attempt to access beyond end of device [ 2032.794128] loop2: rw=1, want=145, limit=112 [ 2032.812589] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 2032.879960] attempt to access beyond end of device 13:24:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1f, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) [ 2032.905379] loop2: rw=1, want=4241, limit=112 [ 2032.947031] attempt to access beyond end of device [ 2032.977603] loop2: rw=1, want=5273, limit=112 13:24:41 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2032.999518] attempt to access beyond end of device [ 2033.018178] loop2: rw=1, want=5302, limit=112 [ 2033.037984] Buffer I/O error on dev loop2, logical block 5301, lost async page write [ 2033.069618] attempt to access beyond end of device [ 2033.084228] loop2: rw=1, want=5303, limit=112 [ 2033.112817] Buffer I/O error on dev loop2, logical block 5302, lost async page write [ 2033.153884] attempt to access beyond end of device [ 2033.193355] loop2: rw=1, want=5304, limit=112 [ 2033.217756] attempt to access beyond end of device [ 2033.232537] loop2: rw=1, want=5305, limit=112 [ 2033.252533] attempt to access beyond end of device [ 2033.268675] loop2: rw=1, want=5326, limit=112 [ 2033.283704] attempt to access beyond end of device [ 2033.299300] loop2: rw=1, want=5327, limit=112 [ 2033.308710] attempt to access beyond end of device [ 2033.316108] loop2: rw=1, want=5328, limit=112 [ 2033.321010] attempt to access beyond end of device [ 2033.326365] loop2: rw=1, want=5329, limit=112 [ 2033.331066] attempt to access beyond end of device [ 2033.336636] loop2: rw=1, want=5378, limit=112 [ 2033.341341] attempt to access beyond end of device [ 2033.347643] loop2: rw=1, want=5379, limit=112 [ 2033.347904] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2033.357851] attempt to access beyond end of device [ 2033.366113] FAT-fs (loop5): Filesystem has been set read-only [ 2033.373626] loop2: rw=1, want=5380, limit=112 [ 2033.385291] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2033.391006] attempt to access beyond end of device [ 2033.408955] loop2: rw=1, want=5381, limit=112 [ 2033.409382] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2033.413503] attempt to access beyond end of device [ 2033.413515] loop2: rw=1, want=5390, limit=112 [ 2033.413545] attempt to access beyond end of device [ 2033.444010] loop2: rw=1, want=5391, limit=112 [ 2033.449334] attempt to access beyond end of device [ 2033.454105] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2033.454927] loop2: rw=1, want=5392, limit=112 [ 2033.472041] attempt to access beyond end of device [ 2033.477079] loop2: rw=1, want=5393, limit=112 [ 2033.503623] attempt to access beyond end of device [ 2033.508722] loop2: rw=1, want=9489, limit=112 [ 2033.527551] attempt to access beyond end of device [ 2033.532520] loop2: rw=1, want=13585, limit=112 [ 2033.564757] attempt to access beyond end of device [ 2033.569783] loop2: rw=1, want=17681, limit=112 [ 2033.593880] attempt to access beyond end of device [ 2033.604579] loop2: rw=1, want=21777, limit=112 [ 2033.623912] attempt to access beyond end of device [ 2033.628935] loop2: rw=1, want=25873, limit=112 [ 2033.647861] attempt to access beyond end of device [ 2033.652819] loop2: rw=1, want=29969, limit=112 [ 2033.672197] attempt to access beyond end of device [ 2033.682938] loop2: rw=1, want=32209, limit=112 13:24:43 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xb4000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:43 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x10000) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x10001, @mcast2, 0x6}}, [0x5, 0x157, 0x98f5, 0x0, 0x6, 0x7fffffff, 0x4, 0x9, 0x1, 0x4, 0x0, 0x0, 0x1f, 0x7ff, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0xbe}, &(0x7f0000000200)=0x8) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 13:24:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000100)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000080)={0x2e, 0x4, 0x0, {0x5, 0x200, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:24:43 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:24:43 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x13c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:43 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x200000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2034.937985] attempt to access beyond end of device [ 2034.943253] loop2: rw=1, want=130, limit=112 [ 2034.955792] attempt to access beyond end of device [ 2034.961452] loop2: rw=1, want=131, limit=112 [ 2034.966326] attempt to access beyond end of device [ 2034.971611] loop2: rw=1, want=132, limit=112 [ 2034.976355] attempt to access beyond end of device [ 2034.981800] loop2: rw=1, want=133, limit=112 [ 2034.989313] attempt to access beyond end of device [ 2035.036569] loop2: rw=1, want=142, limit=112 [ 2035.054734] attempt to access beyond end of device [ 2035.081314] loop2: rw=1, want=143, limit=112 [ 2035.095200] attempt to access beyond end of device [ 2035.127044] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2035.135112] loop2: rw=1, want=144, limit=112 [ 2035.146134] FAT-fs (loop5): Filesystem has been set read-only [ 2035.149988] attempt to access beyond end of device [ 2035.175239] loop2: rw=1, want=145, limit=112 [ 2035.193924] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2035.221081] attempt to access beyond end of device [ 2035.238828] loop2: rw=1, want=4241, limit=112 [ 2035.298794] attempt to access beyond end of device 13:24:43 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x402000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2035.324255] loop2: rw=1, want=8337, limit=112 13:24:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x103ff, 0x2, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2035.392485] attempt to access beyond end of device [ 2035.423312] loop2: rw=1, want=9945, limit=112 [ 2035.441560] attempt to access beyond end of device 13:24:43 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc7000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2035.471350] loop2: rw=1, want=9974, limit=112 [ 2035.486640] attempt to access beyond end of device [ 2035.517746] loop2: rw=1, want=9975, limit=112 [ 2035.542999] attempt to access beyond end of device [ 2035.577855] loop2: rw=1, want=9976, limit=112 [ 2035.594958] attempt to access beyond end of device [ 2035.622391] loop2: rw=1, want=9977, limit=112 [ 2035.647948] attempt to access beyond end of device [ 2035.682469] loop2: rw=1, want=9998, limit=112 [ 2035.715352] attempt to access beyond end of device 13:24:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getown(r1, 0x9) [ 2035.742248] loop2: rw=1, want=9999, limit=112 [ 2035.770851] attempt to access beyond end of device [ 2035.808546] loop2: rw=1, want=10000, limit=112 13:24:44 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x900000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:44 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget$private(0x0, 0x4, 0x22) semget$private(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x200) semctl$GETNCNT(r0, 0x2, 0xe, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2035.829988] attempt to access beyond end of device [ 2035.844569] loop2: rw=1, want=10001, limit=112 [ 2035.868417] attempt to access beyond end of device [ 2035.873381] loop2: rw=1, want=10050, limit=112 13:24:44 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xda000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2035.920906] attempt to access beyond end of device [ 2035.929025] loop2: rw=1, want=10051, limit=112 [ 2035.950779] attempt to access beyond end of device [ 2035.965804] loop2: rw=1, want=10052, limit=112 [ 2035.980824] attempt to access beyond end of device [ 2035.998065] loop2: rw=1, want=10053, limit=112 [ 2036.012469] attempt to access beyond end of device [ 2036.041439] loop2: rw=1, want=10062, limit=112 [ 2036.078800] attempt to access beyond end of device [ 2036.109804] loop2: rw=1, want=10063, limit=112 13:24:44 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x101, 0x10000, 0x7fffffff, 0xfff, 0x76d, 0x2, 0x0, 0x2, 0x8, 0x2, 0xa449}, 0xb) 13:24:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x3, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2036.134158] attempt to access beyond end of device [ 2036.164081] loop2: rw=1, want=10064, limit=112 [ 2036.189351] attempt to access beyond end of device [ 2036.199722] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2036.214943] loop2: rw=1, want=10065, limit=112 [ 2036.228224] FAT-fs (loop5): Filesystem has been set read-only 13:24:44 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xed000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2036.248819] attempt to access beyond end of device [ 2036.268623] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2036.277314] loop2: rw=1, want=14161, limit=112 [ 2036.333812] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2036.352367] attempt to access beyond end of device [ 2036.365593] loop2: rw=1, want=18257, limit=112 [ 2036.374433] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2036.413162] attempt to access beyond end of device [ 2036.426316] loop2: rw=1, want=22353, limit=112 [ 2036.466570] attempt to access beyond end of device [ 2036.481483] loop2: rw=1, want=26449, limit=112 [ 2036.557287] attempt to access beyond end of device [ 2036.581289] loop2: rw=1, want=30545, limit=112 [ 2036.617347] attempt to access beyond end of device [ 2036.639153] loop2: rw=1, want=31025, limit=112 [ 2036.866188] net_ratelimit: 26 callbacks suppressed [ 2036.866202] protocol 88fb is buggy, dev hsr_slave_0 [ 2036.877016] protocol 88fb is buggy, dev hsr_slave_1 [ 2037.345833] protocol 88fb is buggy, dev hsr_slave_0 [ 2037.350963] protocol 88fb is buggy, dev hsr_slave_1 [ 2037.356190] protocol 88fb is buggy, dev hsr_slave_0 [ 2037.361272] protocol 88fb is buggy, dev hsr_slave_1 [ 2037.587203] protocol 88fb is buggy, dev hsr_slave_0 [ 2037.594771] protocol 88fb is buggy, dev hsr_slave_1 [ 2037.603482] protocol 88fb is buggy, dev hsr_slave_0 [ 2037.611040] protocol 88fb is buggy, dev hsr_slave_1 13:24:46 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) 13:24:46 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/203) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000280)=""/81) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000000b00000001000000ff070000018000003304e373007400000100ac03000000000000000a00000004000000020000000b000000ffffffff00000000"]) 13:24:46 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfeffffff, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001480)='/dev/full\x00', 0x40000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000014c0)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0xfffffffffffffbff, @ipv4={[], [], @empty}, 0x7}, @in6={0xa, 0x4e21, 0x6, @remote, 0x1249}], 0x48) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/9, 0x9}, {&(0x7f0000001200)=""/121, 0x79}, {&(0x7f0000001280)=""/93, 0x5d}, {&(0x7f0000001300)=""/128, 0x80}], 0x5, 0x0) semget$private(0x0, 0x0, 0x400) r2 = semget$private(0x0, 0x7, 0x300) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x3, r3) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000001440)={0xa, {0xd5ee, 0x8, 0x3, 0x600000000000000}}) write$FUSE_IOCTL(r4, &(0x7f0000001400)={0x20, 0x0, 0x6, {0x8, 0x4, 0x4, 0x3}}, 0x20) semop(r2, &(0x7f0000000000)=[{0x6, 0x7f}], 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000001540)={0x5, {0x20, 0xfffffffffffffff8, 0x7fff, 0xffffffffffff924e}}) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) readahead(r5, 0xfffffffffffffffa, 0xe7) 13:24:46 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r1, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 2038.149687] attempt to access beyond end of device [ 2038.159270] loop2: rw=1, want=130, limit=112 [ 2038.183662] buffer_io_error: 38 callbacks suppressed [ 2038.183672] Buffer I/O error on dev loop2, logical block 129, lost async page write 13:24:46 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x6) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) [ 2038.267147] attempt to access beyond end of device [ 2038.291584] loop2: rw=1, want=131, limit=112 [ 2038.316733] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2038.333721] attempt to access beyond end of device [ 2038.352566] loop2: rw=1, want=132, limit=112 [ 2038.372791] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2038.399488] attempt to access beyond end of device [ 2038.418971] loop2: rw=1, want=133, limit=112 13:24:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000440)="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", 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x4, 0x4, 0x7}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r5}, 0xc) dup3(r4, r6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:46 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xd01000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2038.451512] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2038.482867] attempt to access beyond end of device [ 2038.505666] loop2: rw=1, want=142, limit=112 [ 2038.534001] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 2038.567524] attempt to access beyond end of device 13:24:46 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xff0f0000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2038.588546] loop2: rw=1, want=143, limit=112 [ 2038.637319] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 2038.678650] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2038.689603] attempt to access beyond end of device [ 2038.701229] loop2: rw=1, want=144, limit=112 [ 2038.710766] FAT-fs (loop5): Filesystem has been set read-only [ 2038.720649] Buffer I/O error on dev loop2, logical block 143, lost async page write 13:24:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'system.', '/dev/kvm\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x3, 0xfffffffffffffffd, @name="44b20c0a1a4ef2d358838bb00cc94cbd60803493ce3a1817b8ce8e6b4c6dcdd6"}) [ 2038.737874] attempt to access beyond end of device [ 2038.743964] loop2: rw=1, want=145, limit=112 [ 2038.756284] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2038.779429] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 2038.796302] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2038.837353] attempt to access beyond end of device [ 2038.851916] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2038.864982] loop2: rw=1, want=4241, limit=112 13:24:47 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2038.909909] attempt to access beyond end of device [ 2038.925077] loop2: rw=1, want=8337, limit=112 [ 2038.950746] attempt to access beyond end of device [ 2038.962817] loop2: rw=1, want=12433, limit=112 [ 2038.994105] attempt to access beyond end of device [ 2039.012756] loop2: rw=1, want=16529, limit=112 [ 2039.074959] attempt to access beyond end of device [ 2039.092318] loop2: rw=1, want=20625, limit=112 [ 2039.171306] attempt to access beyond end of device [ 2039.205975] loop2: rw=1, want=24721, limit=112 [ 2039.224678] attempt to access beyond end of device [ 2039.242175] loop2: rw=1, want=28817, limit=112 [ 2039.282697] attempt to access beyond end of device [ 2039.287741] loop2: rw=1, want=30017, limit=112 13:24:48 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 13:24:48 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xfffffffe, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x0, 0x800}, 0xc) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x2, 0x3a, "bc5581dda9ce92301b30428620b3bbed054930899ef202aea22567422aacf2c31c0e679820039617c35ca569c1f1360590741a817401451507af"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:48 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001a1c74e3523f67243f039ca52d1724cc028d9bb4"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000001c0)=0x8) 13:24:48 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1600000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:48 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x420000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 2040.543216] attempt to access beyond end of device [ 2040.548650] loop2: rw=1, want=130, limit=112 [ 2040.561573] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2040.580401] attempt to access beyond end of device [ 2040.592852] loop2: rw=1, want=131, limit=112 [ 2040.602925] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2040.624097] attempt to access beyond end of device [ 2040.647745] loop2: rw=1, want=132, limit=112 [ 2040.666620] attempt to access beyond end of device [ 2040.698495] loop2: rw=1, want=133, limit=112 [ 2040.723734] attempt to access beyond end of device [ 2040.740609] loop2: rw=1, want=142, limit=112 [ 2040.757766] attempt to access beyond end of device [ 2040.782605] loop2: rw=1, want=143, limit=112 [ 2040.802671] attempt to access beyond end of device [ 2040.819784] loop2: rw=1, want=144, limit=112 13:24:49 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffffff000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2040.836359] attempt to access beyond end of device [ 2040.871437] loop2: rw=1, want=145, limit=112 13:24:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2040.922158] attempt to access beyond end of device 13:24:49 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1a01000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2040.955613] loop2: rw=1, want=4241, limit=112 [ 2041.047628] attempt to access beyond end of device [ 2041.081740] loop2: rw=1, want=8337, limit=112 [ 2041.156415] attempt to access beyond end of device [ 2041.190157] loop2: rw=1, want=12433, limit=112 [ 2041.258030] attempt to access beyond end of device 13:24:49 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2041.291682] loop2: rw=1, want=16529, limit=112 [ 2041.311627] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2041.336385] FAT-fs (loop5): Filesystem has been set read-only [ 2041.347744] attempt to access beyond end of device [ 2041.361833] loop2: rw=1, want=20625, limit=112 13:24:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x20000000000003, 0x11f000, 0x2000, &(0x7f0000016000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2041.385643] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2041.427925] attempt to access beyond end of device [ 2041.474697] loop2: rw=1, want=24721, limit=112 13:24:49 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000001c0)={{0x1f, 0x5235b3c0, 0x1, 0x3f8, 0x80, 0x401}, 0x84}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0, 0x0, 0x1, {{0x3, 0x1, 0xb, 0x5, 0x1, 0x4, {0x5, 0x8, 0x1, 0x4, 0x0, 0xd8, 0x0, 0x1f, 0x5, 0x2, 0x3, r1, r2, 0xef7, 0x7}}, {0x0, 0x1}}}, 0xa0) [ 2041.510364] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2041.534470] attempt to access beyond end of device [ 2041.579943] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2041.600048] loop2: rw=1, want=28817, limit=112 [ 2041.669552] attempt to access beyond end of device [ 2041.695494] loop2: rw=1, want=31249, limit=112 13:24:50 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:24:50 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x200f171a00000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpid() ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2402, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:50 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000045951f016a000067000000000048a48c2c15215d09c440b71a178d9dca65fbe24419b3e1c453f15cedc8da20cf8c862d80ca7ffbaf98306e040057dbb9839d5f01760e9749b45a6d350e935e72438ae2f03b14014abacc8a14ba35cf0ba0d871636fe0bed58ff082e94bcbf14e8d3e7901831a0e70c26fb9865b27b937ba6a26d7651a6683bd24f943029eee161d7cc449645c1fd2011ffd0e02634a52321874ea41e00dee3cf76ea744075e5b8b5c5149beb2e0b9e5b71404a10c14e6076dba8047555835d8c193aea2f11bc649d8221e06000d00000000000000000000000400000000"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 13:24:50 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf0ffffff0f0000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:50 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:24:50 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f00000000c0)=0x80) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:50 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) prctl$PR_GET_FPEXC(0xb, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:51 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x100000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:51 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x203c481b00000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:51 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) sched_setattr(r3, &(0x7f00000001c0)={0x30, 0x1, 0x1, 0x5, 0xb4, 0x6, 0x5, 0x100000000}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x8001, 0x0) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) getcwd(&(0x7f0000000300)=""/84, 0x54) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x468801, 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000080)={&(0x7f0000004000/0x1000)=nil, 0x4, 0x1, 0x0, &(0x7f0000009000/0x4000)=nil, 0x8}) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000240)={0x3, 0x1}) 13:24:51 executing program 2: socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:51 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x200000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2043.105837] net_ratelimit: 26 callbacks suppressed [ 2043.105844] protocol 88fb is buggy, dev hsr_slave_0 [ 2043.110855] protocol 88fb is buggy, dev hsr_slave_1 13:24:51 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x205b521500000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0x0, 0x5, 0x8001, 0x5, 0xfffffffffffffc01}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:51 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x400000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:51 executing program 2: socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:51 executing program 0: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377781f5e01000020"], 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0) renameat(r1, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./bus\x00') unlink(&(0x7f0000001e00)='./bus\x00') pause() sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000340)=[{0x16, 0x1ff, 0x5, 0xc07e, @tick=0x2, {0xc800000000000000, 0x4}, {0x0, 0x3}, @addr={0x7, 0x7}}, {0x3ff, 0x1000, 0x7, 0x8, @time={r2, r3+30000000}, {0x0, 0x2}, {0x674, 0x4}, @connect={{0x5, 0x40}, {0x4, 0x200}}}, {0x0, 0x1, 0x40, 0x8, @time={r4, r5+10000000}, {0x200, 0x1}, {0x0, 0x10001}, @quote={{0xffffffff, 0x280000000000000}, 0x500000000000}}, {0x4, 0x6, 0x5, 0x2, @tick, {0x401, 0x400}, {0xfffffffffffffe00}, @addr={0x20, 0x8}}, {0x3, 0x8001, 0x9, 0xfff, @tick=0x80000000, {0x8, 0xca6}, {0xfffffffffffffff9, 0x5}, @queue={0xe48, {0x8, 0x20}}}], 0xf0) 13:24:51 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0xa400) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x4, 0x2, 0x6, 0x10000, 0xb679, 0xe070, 0x1, 0x8001, 0x0, 0x4, 0x8f29, 0xfffffffffffffff9, 0x6, 0x200, 0x8}) r1 = semget$private(0x0, 0x3, 0x400) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) [ 2043.585819] protocol 88fb is buggy, dev hsr_slave_0 [ 2043.590958] protocol 88fb is buggy, dev hsr_slave_1 [ 2043.596136] protocol 88fb is buggy, dev hsr_slave_0 [ 2043.601303] protocol 88fb is buggy, dev hsr_slave_1 [ 2043.690407] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2043.716721] FAT-fs (loop5): Filesystem has been set read-only 13:24:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:52 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x600000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:52 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2502, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0xa9, 0x0, 0x0, 0x0) ioctl$void(r3, 0xc0045c79) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0x3d14, 0x0, 0x6, 'queue0\x00'}) [ 2043.767384] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2043.825810] protocol 88fb is buggy, dev hsr_slave_0 [ 2043.830950] protocol 88fb is buggy, dev hsr_slave_1 [ 2043.836110] protocol 88fb is buggy, dev hsr_slave_0 [ 2043.841254] protocol 88fb is buggy, dev hsr_slave_1 13:24:52 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2069791c00000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:52 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x900000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:52 executing program 0: seccomp(0x0, 0x0, 0x0) symlink(0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 2044.087250] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2044.109441] FAT-fs (loop5): Filesystem has been set read-only [ 2044.117875] audit: type=1326 audit(1549545892.457:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9729 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0 [ 2044.193913] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2044.238463] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 2044.283817] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:52 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xc00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2044.386990] syz-executor3 (9736) used greatest stack depth: 22832 bytes left 13:24:52 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="78d2ce07af91f042840b7a0c60c3480d9d9802d8a34b4fd07d6ae423084f272ff213d9edc2dd74bc5de74ab0260772986373f5a0ac3d71c4d93ca91018a1245bdca6724b0e84ebc6579dd34550369d839178d7c05dd40b93f14564544dead28b82aa810a682145b42265a00b0cf66ca89541859a7f874fc39f823737019ebd233a2fd0c5a5684de22854a09619c0d719b2af03ddaabc3c5f3a963a03c7d47880ce2a822001d83c5e2576689f214672559bed32f1501c09d163586402596df0afbfbd7da9ec3acdf9c0c615c03ce2de9438e455133f318d8eb29f51d2aac808536b2648186a64e74565", 0xe9, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x4) 13:24:52 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2088831600000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:52 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:53 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0xf00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2044.732374] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) [ 2044.778632] FAT-fs (loop5): Filesystem has been set read-only 13:24:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2044.821435] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2044.858975] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2044.894852] audit: type=1326 audit(1549545893.227:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9729 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac9a code=0x0 13:24:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:53 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0x0) inotify_init() ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, "c0c814a55b6300d28afc61ac7dd1ffb869b761e8e53ee36e4be89e9fea175523e4468dec44bf8b5473c7a5062b4ede67dcb24cb9484ccfff2b3a70befc56e8ab2eee3483f5bf78c16beac035b700eb84e2216f268d02b717d2046c273814475b412437f7dc08a13a55d3c02132999dfd9fe80b750eff4d7c1da975b3835602728ae09e72527fcee19377e29c6c19e1ccce0f75e0e54001e3e83e473fa3d37eca8be1b3de565571e0e84f310c11fa8616068113b038aaa5c69967699fc2aa41c6f26fc22cf68e3577242c9b4ca20fab9de5885e0648fbd7af089b05f38f152d2f8144461608733c567b6dc5d2a07022c3764565c85abcfd99dd7a85e58939278235d50e8b321be7dbaa5141e097c28364fad2f713d666ca94f4e429687fcabb72aceeaf8abe5b506d98dc393b6e97492d785ead0ca2953f92c4d2b2c9f616e3d98b36be55a923fc5892413f7a3b615cec89b52e0ecdcee0aa5af72bcbb91b4bade7435dd8b529feaf13f8b48fcaca5952235d2e909f8831d8ca05a0daa3f6c581f388e0c1879b41fe63ef3d122bd0c5acd4fb07b96797918791075ae7383bb1bbdea574b31301ff37ecc45671ee2e7fc55bf6244025d1fd82dca56a42a23aa826a0b1e102bd87893ddc05649304eb1866c796e46e0d57f552bd572891ef892918bb2e7f2c6bcf68f388ea0c50f48c06de1b46b1434cdf25ca1288ebabe2a33d1c6effb77f91ef75471e93952caeda8ac2b2677e46d62b8366922d093832bccb949e177b4417864812d22972d81d89158288b5318d017329d4e8f66273abf74c434f318ebf32c7629342a85336387231b1e579d57cff0b125bef9dddf0fc33f71cb59d5a8972cda06ba6bba4a89cb8d3b465492c431698984998b2979ea61fed3d99b049724f2bdda5a0700ccb28825da1343f41290e569a6d38d4ae3968147cf39b097efd78e058fc71523c12e724bf93dc4ecc02b5cb18d13b59ec8f85368ac1ea93ed0149c60c53569dc69cdb3f37470eab26ef010b03a7e651b9e8e9065da347660836eddb3988c9a0f394aad055f727310f646d6cb35131d02aaf24735792bfce250798bebf0d1a4495fca568b9449e81afef2937b50faf873257d7efa07d31759474d50ca2a7922e79ab47dd59b11dfd1ec43fef3551aed81d01ee4ab997c6cecc39013dcaa442aec803e4cebbc288b4f9e87b30613f0ec88ddc6f60f56787f4040897e6e6bdac317d74b27f97f2efadb031f03c61954fd0232373582b7fa315d3eb9f67053126d2ed0636f04d669c47bdeb078fbda177533902e20b5ce9d8f395ea4c0aaf2cae774fe99bc40105a9ca184bcb598ab2f49c1df62d32d1a6d73a26812cb47a2ccaf0e9b759df89ad1e18238d897b9fd658f6786a92a0c12bd0ee6dad8a430a67962363e5b9afb3329e4f1f6fcd7e63cb8f24872bcf5b8c349d9ce423666ca39f16884219dea338b388e40f4ad996419cb3858637364d8e5af67f846d77b2749115131a3642ef56681315e4a2cbca5e60febabf693570f515e09c2a8994a8e2be3cba28118ef429d4de781118182607dd2c2d5aaba621ea29c140338bd8f1787fd2a3f43bb7fa22a8ce053adb331a4c78eab569af317e14360a6bf1c8b7394f34bfc1a941ac88dab334d5a2d45fc83bee28884698fd82339c972a06efb369220049ca89727513bd4262ad6f94f55f659ec98b684b1d92e1b6a303548a196cc5316e9845baaf01e737ef047d3d1ac4fe13de618e8fd6471c225e688b73b866213f4765c1a1ecf041f66a11177b0425b0423c455dccfa35a34f3b1c4c9850267bd41dcc366f4f8fef6982699e9aee7f3edff90217c84f6865234676e65911e5e99739792161766e959d061d6e86797b595ae3cffc043da0929dce1b4bd27e04532800f14f69398a681d46f00197f547fa138e676a4c84e586e9a2037faad7d7342221c229ff13606688ab70305dc28d01270604fbcb2b5777541e637a10e7d6c2dfa76461b18c8b303234282f31b7ed8afd0cdcc3978c6520a182000ea312296c7d9df08c2a67b944bc519113822014a831c8d6a7f8d26a7a443666b6077bdc1c11cf47001bcbb484d163543445c77a02140191bbb813da818b4dc3ef1ca420f624e5cb67c48024aeb8691b549202750899938067a3ad49da19e9fffc6486b3525fba8b2ff991fb3b4c1a536818f2dad96f713ac264a22136c6a3a9eacb4f69ab08cfe2b971a7d916833c6a0370d4b0bc428db2e4b4013899668b73caf9c983e2f07e46b4b5b4f0d231edee8b1951e1d0e34c881d1fc5c6be05b92b13680398e7109bd18048f0bd980fceb24e59411873e7a8a7f95f4da2ba5c082fdda710361e163a213a3dbb82c08a69020545da4636c09a67cd962182a011cf5eb1c3d999abc7b834ee518bb53afe19941927ca190699abf79c334c52e206fc851deb7398947ad5bd125ef3f51349497142e921c85506c739f6319ae0eb8e3c551ceb7e16afc2d6aad36841ed8eb560ef984ee5e00f1ead2c646546b3c145e3700b07fc257551641cf3dcb76a8b3cc75994f2c3eb521cea22d64c8b72b2de506fde8185b70b4707b7f571668a5925ca21e605904d7c896a5d7290b9c4fc75ecc7ddbbd7f6f003a74f53d1a5432e0377a3efce1e7ac61e36dc13aeea57400d4d3986db3fccb6edaf83f86daeb42f416f58c502e74178e013b399d0b155e0df86b40b5f3f2ab0ad61c90870cee340c07977b55622699101e5372677dd4e208fa6b5d4834a2d6f37b2ead107218aa0e702d1f6a60bd4ad3a2e22807237129fdc02993ef1fffe3c285bd4f7b093b2da8d772ce2df7874bf9b7fd0893eb66a4931acc38129bfe4a8fc6b28ea83bcca1220b66c86d4d90914bb9e9a425fce618f11b66f93aa78515eac0f3956cb1e8b6f12d7f6f22c1ca5563e280b15c64732aec2a37d6010cee0fd2263ea3ea2011043153284b4a5fc87cc0dd8c36f084ce715a6e9ba3e8b2586726255d122f2b5677d6590405ae031df8f83840ef3011a7f5d18037407758270d980aa65d5a4aa26a35a61b65178b6183b282771e89a8fe47bd3ea5a23146b924a47c3cc2540a9c8d91d4a8924e010fb6d3e60457e0aa86749cc3444707fda055a0f489aecda68af7f0d7d31cf25641a10bcc0d00996cddf9059121639fa3ff2e5490bae6b702fcf226d8e50f27f0973e5e4cf543445524d0fe3bd55d3f215978bfabcba0d44c076f5b333b2095c70f6a5426338bf0c065ddce27f6730606d84d1ccef8cebcd15085fa8a5d0975dc47eeb09a4ab6da21d01916c97f4e266c4b01f2bfb3b6a08bb5a7cf834e56782d824e7c55b591cd883ed9e806a4f7033bbab49a2b8ab2cb0f6da9d76968208236b35a51f8eba3769a676ad60d69c475706a630f3a078ebaa6ba5bc25719867cb61d48cc3a381b261165c04f3c93f37d72fc15f43df1de34e24e80a46f5d15fb362e71cb4a5365dde04a53dc5e42745fbd601ff148db416244dd76ac16f24138ef9a02491eb5b48d731a8bdcd46040d0ff11a07c040b83db84bfd21ffb1d818203cb7d3f8fca47f1dc510afa8219ab031aaba2147aed7c50228930e895a72abf55ca6997131e231ea92e0059b680735548adf2d572c3540e096a644deb3750e3b341bbeffee70ff22e0b4e56142e4c1965c01a646dd9b5b0055f88f08987ad45adb844b9ffc84792073048c28bcb60f2666802052ee45dcd9a2950d55ecf0234a3dcf67e83cfa0bfb1285eb54e6292d8075c9e1b459e48556f416898557c9c864fc5de459feb53e33dd1a6860a2d1a836ab5ff6efaee123b3715a7137787ee4345efbce38074e262f363a8ff400345c8539d44a7286c7291246810bce063f0877db6585842380b530a4aaef6e36779a95fed220cef6c1fff2fdd5031f83987dc3282d432f322852cc9dc6d00c59d5ed83b386ff97c521e528e59f2df932467ac02d17f8818c2de26d69725f42cecaf186fab7b6e10b1ebd9a9a12ed83cd382d9a6f9a9bed2736cb0ec0260057f5ec704d2e1a64caad59e02ff2022174b23564cb0942e6769b12e0ae4d65dc4c5e6b6ceaf2667e085909c93a9768b7bfdac612801c0bc3848bad51e2367f788cbd1c5091ce0e9c567528c72003712e91247d87f1ff60d3865fc687a35886822079392f8d151b89e09469bef98e59139c460a53805a93245148cbb9a6a010dadc87e9b1a0e0a89e87e433ff1c0ad4b125760858c8badff4d82cbd31cf88f3e2e16a4e960e1e0b5825fc0f2b21d660cf60069d43fb6a8a96c44fa922164f02c9cd5ebb6fad848871224d157777b5a70dc6deb988506bd03aa4ce2200e9ce23641221784250c22d2c8635a3512f45d433cf66e158eb261f48a23d54f5ef4358df3487da471eb5775bdba565ee170be126b2300d0dad050212606f2d77a63fa2ab430e62670e852b89944e611509415bee36bf0961c8918bd8b0eb8af45b1a9d0420c7101a9c5f4a63efb9cc8de7897b5e2b02cb5885ad8d0d8ac7754ba8d4e9d37175e614e3f3a6a7b122bbc6dd9ce78f1b9a4e940a1160bb85650d8932fe1a82d0525630ba017be5129625a45c3cae66c7cdaa33ee704791db81ef2e11a2f528974fa388cd929c934dbdb21425e6117839ab33b2926b036457db3a43083c3ec17231aed4ee5b607a45a5735c9470c03a424b43efcea953c078717344aeb1449c0dfa3a3ec224b542c16cf735466bdaf26b522aef1db547b14f07ebd4f5da34426a46007757be47ed3f643c47f2c4467762cd049d6f4cf8a78d04f8318bdedcee80871e91c0330499d88254555c456d9bde8a892394267eac15c230cf7e7ba19ebc01b1905c80476de3cea8258f6d0820d159f4aa8a37fb378b2685da4e0e89d253187219869f1157bbe4a8a43eabf65e86a6d9b21e25d91c43c3036914427833ed87073886719069148e2e47219bb5da5d9664d64dc5c4ff71c0e808dadbb53a23e41e3c02fd0c9e0704490f3283d1864d15d795882e6522f31445556cab6832f273dac0c7aef4e3f8c09a34d1624fdb087d852f2e827fb2c3105f1afda54b9dc12cfde3cf7747daa5ac70904e82636a13155303f9a1198d6e7f9dc7be394ebc5db9e8380e290e6cae5f320caa56aa94490789fce2e2540b3de8865396f58e14d61d3cb122f7bd1af5a27c6fe733eba3cc39106efc906ea967fb833e2480aa80bd56ccd9e5c25304e2b8135f1453af70059e599cb67bc8eaaa38c39768e74d3da8aba0135f0192d7ddf0149ce62f353b0360251f1f88b272c6e85b4ee4e0563a6de80de83749af6e6aa4d80cab7031aff3f7e8d0c9114940549f828a62be9fd6a16db001369728b4b93d4ecf91563ae03def3ca4e9900a97657c4ff1e41c5742fb3329ba882ed61645aedb22f2543b83cd4007e5d228697a48064acc32ece41f2d5ead3f31a9689249e8b4bb57ac0b136b6c60ec531708235b94db823344aafbb9b79e21959635664b2193c3add0b28767906b7ba4118e6548e9a23b49e9181dc6f7dc7857425c9ab1b1451bc4572fd060190d0b5a76b8368b68e72a212bd0f89d0778d293b1d32f155f30c9aafe7215d2e746ea8f2c73a30bcd8c093a489519b60616b15afe69074ee77fb65caf5faf0aad49106057a91fdcd622a07ac21eb5c221f2e65323228af41b3eb894517c34c4f60ba20fb6f6c4309a7357884c0eeeb0a4874550107f2d0ffdc412f86bdf712f96183b3932cfb4da3f179cde1a288df9af09c243fae8c67b0d208d9cdb7adde8d5e548e0624b19da4818ef656b88280a", 0x1000}, 0xfffffc41) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000380)={0x0, 0x0, 0x9, [], &(0x7f0000000340)={0xbf096f, 0x8, [], @p_u16=&(0x7f0000000300)}}) [ 2044.958104] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:53 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x20b5b41700000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:53 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1000000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20003) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2045.314338] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2045.340449] FAT-fs (loop5): Filesystem has been set read-only [ 2045.383734] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:53 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x100, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x10200) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x10880001}, 0xc) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 13:24:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f000000d000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:24:53 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1200000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:53 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x20e2e51800000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:53 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = semget(0x2, 0x2, 0x200) semget$private(0x0, 0x1, 0x80) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 13:24:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:54 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1301000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2045.788947] FAT-fs (loop2): bogus number of reserved sectors [ 2045.820655] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)='@', 0x1}], 0x1) dup2(r1, r0) 13:24:54 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2300000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:54 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x1c00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:54 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semget$private(0x0, 0x4, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000180)=0x84) r2 = semget$private(0x0, 0x3, 0x11) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) [ 2046.659931] FAT-fs (loop2): bogus number of reserved sectors [ 2046.695638] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) uname(&(0x7f0000000440)=""/4096) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:24:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 13:24:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4) 13:24:55 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2601000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2046.829773] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2046.871889] FAT-fs (loop5): Filesystem has been set read-only 13:24:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) dup2(r1, r0) [ 2046.915222] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2046.926598] FAT-fs (loop2): bogus number of reserved sectors [ 2046.998157] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2047.017713] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:55 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2f00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 2047.077564] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:55 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2701000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2047.206730] FAT-fs (loop2): bogus number of reserved sectors [ 2047.258227] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:55 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3901000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 2047.319834] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2047.353975] FAT-fs (loop5): Filesystem has been set read-only [ 2047.396114] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2047.456773] FAT-fs (loop2): bogus number of reserved sectors [ 2047.474947] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2047.482166] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:55 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = shmget$private(0x0, 0x4000, 0x600, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f00000016c0)=""/189) r1 = open(&(0x7f0000000000)='./file0\x00', 0x511000, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001540)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001640)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'hwsim0\x00', r2}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x40, 0x26, 0x0, 0x70bd28, 0x25dfdbfb, {0x0, r3, {0x4, 0xfff3}, {0xd, 0x4}, {0x7, 0xfff9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000001680)={0xf, 0x1f, 0x2, 0x2}, 0xf) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff8) preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/14, 0xe}, {&(0x7f00000013c0)=""/158, 0x9e}, {&(0x7f0000001480)=""/46, 0x2e}], 0x5, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x1ff, 0x7fffffff, 0x3d7e, 0x100000000, 0x1, 0x50, 0x0, 0x7fff, 0x1, 0x3, 0x4, 0x800, 0x92}, {0x6, 0x4, 0x2, 0x3, 0x7, 0x0, 0x9, 0xfffffffffffffffe, 0x2, 0x4, 0x100, 0x4, 0x1ff}, {0x1, 0x20, 0x7c0000000000, 0x1f, 0x80, 0x2, 0x1ff, 0x6, 0x1d, 0x1cd, 0x6, 0x7, 0x3}], 0x5}) 13:24:55 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) [ 2047.563160] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2047.619625] FAT-fs (loop2): bogus number of reserved sectors [ 2047.637598] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:56 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3000000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:24:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) 13:24:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x6, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x8, 0x0, 0x0, 0x0, @adapter={0x8001, 0x2, 0x6, 0xfffffffffffffe01}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) connect$netrom(r4, &(0x7f0000000240)={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='caif0\x00', 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xc67) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000001480)={[0x10000, 0x10000, 0x5000, 0x5000], 0x10001, 0x4, 0x4}) r6 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000100)={r3, r3, 0x4, 0x1000, &(0x7f0000000440)="3c75ae31296caf92846144f5c4a201495bfca45f549206a6a35562257e468d8e131781450a6984096821b1046770a995130b6d3fc2856a97986f135e4ecf7b823d7e5700d17f250c6cb3bb3fc241128b91ebb50c3f8d12720fe223abda4429858783bf56dfc82a4ca80944fcfe3443a5a8df706baed76fb2502fa9c92910b483636f2455a4b1c11df52c4a4fbeb54fbfe5035aced7e1cde47a7690368448fde209b3a9ef81430f7cc91a8f1821eb78d9ab7ae5f61e538999d40ce1803b6ae796cf2f7ac72162185c1f07494e30f86ca175e904aed326fb6c792588893c92dc1fcf83c2604f6382a38ef62cf5975ae10508eb24eb3b18efc134442be306c3484919910a4658fa8d68bdfdd4400d59d2469356709f918a4f4130d32e99df26cad2fec4325c8719a759b75eb3cb339dabbc5da0bd264c664c1344ea1ca0e50cde9b56018608cb2853ab9e859dcf6917961b869254e013a00adc71f713fbeacce178f204a3cb0a546306dd175aed6a8102dbf5390478b6e859d6592c97a1c65e9aa1b543818da6654a523950dcca7069e5a029c3cd1ba6d32ac0ad663ddd39ddc3b6b494632540937d9e598f5af4c5fd23a1eb75d8544384273e838c38492818e16a2e0fe444872cf872203b16461235e2171b1e64a63ba17db01172ec0cca65c6316127004b33466f2aedf91fecfb1f9118b71ead59fa97b3e862239d8c4c25f91bc5920d3cd13371b4eca4f0c9b2a6c0ecca6bcc08182c1724f8ab218c33e765ae3f4cc84bc67a42625545691f11ecad1f635685f9510617be926609a6bdf52f9eb5d859db645608798d2e15e3ee302caac2e983693c59077aec8bf39f121f8ad29034c37d4dc2328f3db6ecd89dec153d759664f75d10fb075c403dd934f80f15f3767e0ee23bf1c2f70a30fe126ff3aead2382441211fce2c14daf2b99eceb231e81c49e9acce0967469a5ff1e4b6955a169a0a2b353068d807d3a3538ee82ab25abccb71d6ed1d048c789367e6bbd8a499e7b931cf6de49a1c9043f56c6b845873f730958fdbf72dc5cc2abc11a25ab35bcf6d82d002be9a07e30a435f8029bcb600e2f9d09147c02f23bbe77c5ffa495aa892b8f5bcd46c1ce242c349a3c901b4533ed6b3189372c42f95284a089da9744fb9c72c2e6bc87decfa6b2ee0c7da325b6d45cd4aaa6b5be5ca0009efa378adac394f454183dbdb9111ca63779453bcc30dc64c9c2c478c1cb00f9e5661d2801d454089d0463626c50ccff68be1401a8f2ec11056ab2650f0c7177e0b56db6b19cca752e4e36ac14ab160bf00b4aaf332b4d6c66bc9b685e1d1842300772b57362d73fa5a9528d876490cc00c45b594535aaf7165ae3a5db6ba4b63bca78e4292382a077442afcdf694f95180d73cdcb2b21f8664818997e9375a83b67e209545b1add82bd6cd91939fb8884d1d93f99e1376caa9f8578fb73f5a1599aee10a4b551b3c54897093b3b63d7592f2db47aef105788cded81d714366116b158ae80eb6e8fe9e19ba9184ec4b84ad2eb0298902ee2e1edd4b6a7cbcac54406c39c517fb06c0fbd0cc9534ba9c6fabac0ca971694c8660905e1ad82c4c2672444b108d548097ceebb709a4dffe85e93a56af14d9bce4aff5aa8cb8c61b8ac88226a87a144f229c4fd196fb5c966a67e6b45108d01217da7db64c2f79a46389ace33329d68a774e1a9265bfe2f38cc0398a778f0b09a7234e7097a60017ce13e3af2be3d93bbf21eb624e2b5a09dc650beee633806be923a3c352dde7bbf88c6ba96500f3e33f548096649a92d61945e8663cdf3f5e7be1831d57f195847f2d97243df3c948b72371f02b230abe32404bf99dc5bd3c08495905e9271b9cf94e379cc300e0c0636d26fb686166afd1a5c39982289436c4e5bbef76cc30fdfddf608a7f970bd2f0ecb8d53e64b00c3c8dfd224aa801cba808cc0fe0512c36ec59e506b54c2a5f095accad305dab75ffff73f89e5f5417a92b31afd69ecd29f71392be9658dbf5eb506873877713e4fc5292c48215cfd199ccf7abc750fb66760de084509a5815639bb659576de9ed2c07ed59a630f01326a38596af25bf7149eea2b9a7cccf84d9fd5975359465f6a3bf63fe2e5aa4e9926a484c630532c805334076f8b2dad340cc8e650e143ea6bcbd375eec29e7ca5ef91b0688461ec5d690613f9c6a5339b9010a6b9390fe5580c4e33b8798a33abe556dcfa6d57e7e6ae9ce8e9bd5ffb4a04af9170c8e106d2dc08b144f85106724e4f6bee49fbbea665fc668ef33d66c529bb34d731674c94b0b735a18931dc67ce934389c6dbed5a5db6ef76dafc34e1021896fb3a69e91d9ef353ca5b641a2ebd822ea1e73c3bcd1157a6bf7554852a5b2e5d334b2ea51d725c3cc47a9470a14b8abc2e044237825688c67dc7d1c80dd6a899ce071fd6b02221a8a05b9e6de75f3e9c13183ba105f60530dd6fac187e2125a8f3b8f14456a844541de7179b434dfa7d63dfbaff0bf25e60c7842a9c775e24bef37bfabad2ffbe7a17fd8c4f2bdbe82da9487b8a23069907a88b2b46f08699b70c67b39ab86102ad8cea7640a5d0771921193b8cc7964640f1f50c4625c99b7abfb00ef5ae376c8b4c21c31d8d8441e4be4e43a08f98979e02543785fcbb58b5b597765d5205eb603481e92425de5a90b4f189af3f6e22fb14de1ebc4f9fee96f5ba71bf115e1d4fcbd2adbcb8769276286cf4387e0118bf83d9676b51002d38b4b7523a562a4aefc949b8c0d4861925c9f75b0d83137a04363537c47e6cd9dda37a0405ff6128ad70fee48c499996a79ee1cb8d9b4f728cfc63018e03942912a2edcf9aa1fd358f15d3b126aa313c2212e08b91b590d42ebaaaa676514ad532f5d41e0ac5351ea7812381433847d9e0340232621bb0080383bc7ee289e6417da487e64d4ba1dc336bb88d5eb029e003aa685fc838a28c9c2a58e3c3e07a67cb736878a6c8bdd629269b43a56dca4d61ab13dc8e48e23fdc1679cff729566b92c50239ae6b630e8561a0d1dc748d6bc1391683d4c75919e527d9b584b5368513cac3d7e1bb8da1db749e11c9a1a57ce9044da2586dae47060d2bcef8c16808033f0a73c71486b25db8d5e0d9baa06c1b82b076f89f5390d8e306b07ee98fbbf1563144f0bd3a481c8d67129f9212b063a47e675e63b5519f876c32c68e612f92e207cbe82c8fa33de7617d2f4b85c2cafadf299dacf9a4f5046959db82d98f6f6e4186a80312cc99a84f1b48c1db070336370ca0614dfb9c6f53ec8e1ae1e0a7e853d9e2843c59a85e212a6642c8835495e029ec4350d2baa318d00b7fd6d2d4bc9cacb5717cf7aa8342f32711daf7caaa2e678498271e9dad5037bb04918940dda5cdaf8d065c57d9a3c9fad3128414da418d5cb5056ab7118de6c1630d457828edb03c35c907a5cf9d1a5a542d4fa62d06509e7802ce93d081e537933d203b9912425090da399327d0485c7d024dc75182aa0260ab25b5b1ef5adc94125621b2f90dc9fe8bb4c45acc2bd55d44206fe2e0e0835ee0365dfaab24613f80a9a61d163d79bd81051d713429eb3d21d858fed73f49e9444e26164ecccf3079be77824c197fc7f6e96d3ebd292d629cfe5867ca4e09bc7e1603cedf139ab59bb9aa7e3b3d0c028afb6c9a53df3528b1897f88b3e17432f6c8560b60b02dfb6bda2541657acae979dfe78d543e7b3dbcf8e5b5472d624646abb2542ab84571e60ded9fc8382cbab7cea0c12f937003dd71bd431007e860950ae013588552e11490289cc18ed8fe9138d56f9eeb97eb4411f0e087b6e9dfc26631fdb361fad4bcf9c30ea5ad195c4e2cf42e14275202e19fcb4f75a08a33cfb7500df6c872b2e99413c98b3116666e31875582cccf6a00d4903836cdd4221771db9e0f50e00be257eb33bac19c1000bbabfc0b75c607bb69adf3bf6eab2704871248402dea5345241762729e54d09ca107fcf62786709d944127f945b9d357cfcc73ee3c13bc1d8d5589abbb0c44059aa46ae07fa6ac65fe5d29e59aa1c1532982d8cc1a6e9658436c87539c0d03d533b0b78890fcb3bd36d4056a0226c38d6ee451e730c154cc2c67263bf0317412df53016f737a2079ea4324ac69997ab5543df4adbeae52e3845a101cf28b25b93e69023ebfc81a64682508c6add228d04bdced3faa6b6dbe18cd8c8c3d2766d66ce973f1da73d5cc86a3f1762a46407becd94466d02be38b227d701c242e91902791f3d6f19b8436fd6f5456e7e61bd02642143c4430ddb078fd7ee972039e29bc4079b969a50e5b8885f284593a9fde948c2ce143080327f703bf3510ff866198afe3909caaeca00d76990d75fe00f65153f656d3bc99c6bf473a34c24345871c29989ec39957dd8d70356a2e19ed7a62954f8e42be26550b1b73675e5822c7709bb701b757906eb04243c79d865252fc4afe8458c0757234b9211feac91dacfaaca27b14925d532593327544acaf8b15ad3315092815d924687f62b86c237521ee91d4e3e75fdb630d0ef1912582ee1049c9b26bba33f48aaa8b8390974c07b8d9312cbbe82766a3ce15b9ee836d1189c1142b364c59e2b9266c2aa2e4fe0f1bae08d8d7d3085548658d770585c49b703be97928d2b0145f9a30e32ee57754a695e100d43074eea0598434d352c6045bb9f4dab33e61071e962a9f9db589cbd2c2a0533445e9a3f2467860c043cf3db1a5a6ab034f9381b3d701ca23db6d327ea7d6c2263dbd6d57f77d0809e55ab663bb39e87fce7bafc8c02af7063f1aa8255fa1c455497a9003ffdbe212865caad9b9dbe4ec0b9db48513b4e21b6e22f359f840260bc85e09b35bb267d8bd21ec796e9bde8ed1b0eba8af3fed8188b24a30808eb2bbb68e14374d4e1a037abf4df8fabbab42793fa248ea61aaff95fab69ec8d259ae1f786ac98f148daa5424baec09c061ee0fb553ceca0905eb63964d648b3187a657c54426ded2d6c31d9a524c105cc78629b68daf598280032b3f02057379a9414236193a6760deb657b6c23093d58c6c42ee8cbc2de5c25c392833edceabce4d880ae8ab0f0c55e5de3076a41729707e17d00b2062639d8f51d3f6cea47c9747888591f0082ee9b03fab947493e41af203ee356ad6e1f00ca70f16f7dc74a38d8d2a0334ba448331a61dae345141e4cd58707194c334ebe199e7f55abc4a788fd8abaa2b1f202ae11c647447504f13e3a48f1d50ee9075aa1e453e16110c5e77e5ae3d5cde196d076f0315df800fd070e20c9a30aab4ac72264130e9affc7302d2e8f0e58bb1fe3151e8f6009d4c2a1a2392ac23eaaeff56c7011f678e84d4f44c63dae7003f4db29befacfa97a03bafbb31eaaca5408a42e793bc40dee43faee605199abd4b14a585194f4cce25e5647437c1c3c5eaf175025f6e9b61c0917493a8925ad2e6d445ca4bb2f401fae21aa76bc40e1839af39e3ee4c24adf00043876d1971adda692354ed4431b81da46af79ce52c21eb5dcf2893512a5693b94a67f28f8eef0bb442d2ac6ad0ebb628e1ef95489a5e59e239bb71f071d5a5752ab6fc62b80d23f42fb1d6989a00684dc7235a5f812de944054f4ee21c1d137551a012e615cef79a5b05d5a8f94ff98c2df39477fe86d520ac211729748044641aea730f990b8dc732cfd01beac494e87e9f876d04996ecd6c534542ee40c457f2782d4608d65287bd78b47a8d026c12a6a4370b8926edc1d664e61f2c894a5bf13ecf6837fbc0440402358bb7fc8926b8ed894d04fb684aaa9f3bb8181e", 0x6216, 0x8001, 0x5, 0x7, 0x3d8, 0x3, 0x100, 'syz0\x00'}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 13:24:56 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4200000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2047.901953] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2047.953198] FAT-fs (loop5): Filesystem has been set read-only [ 2047.962338] FAT-fs (loop2): bogus number of reserved sectors [ 2047.991898] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2048.003983] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:24:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 2048.075307] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2048.196748] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) 13:24:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 2048.243641] FAT-fs (loop2): bogus number of reserved sectors [ 2048.261999] audit: type=1800 audit(1549545896.597:75): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor3" name="bus" dev="sda1" ino=16881 res=0 [ 2048.273670] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:56 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) semget$private(0x0, 0x2, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x501300, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='vmnet0\x00') 13:24:56 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3401000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:56 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x400, 0x40300) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r2, &(0x7f0000000440)=0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000480)) bind(r0, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x139) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x600040, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000240)={0x6, {{0x2, 0x4e20, @rand_addr=0x4}}}, 0x88) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$inet(0x2, 0x2, 0x2) r4 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x1010fc) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x23}, 0x240000000000}}, 0x0, 0x3, 0x0, "eed6edb93b95d377afa091278b2544c237ba4222202a8fc8b9ec1514f6c2272037b35f2b408104461c8acbe07668c99e38b4e4aaa5b2a5480e68ac4b2b34a8027baaaf1985268ed78ccce01ac0c34116"}, 0xd8) openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x100, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000004c0)={0xe, 0x0, 0x800, 0x8, 0xf4, "4dc2de6844b78a8bd6b131bfaa082ac8ddf076c3ef5751fc67f27af811ec7a82fc29e5e2ab2be51e8c25a30a2f76131f492f1d0b0d41e6cf55fe2325c78a0be7957ea4acf65efe02b8e040031015f4c7663a5120f35d1976349b07cc976c38b56f67c3d0c1b9bd51a2112b253b2b97d8db4ee2882b072c3ec6fa2f89598f636819e7f2f64d7750502be8ef3b2a94b7673927fbe22e6019ee5557cda6dda54609d8bd2f0a2aa82c2bb50bb0849a290cc885396712a15036834992c465e3e3a85c5c3239815d2f05812fe4383379758452cf02559759ccf79871f24431ccdec8e202e6dc15858dc2078ce7b6ede19ad45f34018f9e"}, 0x100) 13:24:56 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4c01000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:24:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 2048.528859] FAT-fs (loop2): bogus number of reserved sectors 13:24:56 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 2048.592600] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2048.660981] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2048.693267] FAT-fs (loop5): Filesystem has been set read-only 13:24:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:24:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x639, 0xa923, 0x200}, 0x4}, 0x20, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 13:24:57 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5500000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2048.734163] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 2048.785250] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2048.837952] FAT-fs (loop2): bogus number of reserved sectors [ 2048.858452] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2048.871400] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2049.345925] net_ratelimit: 26 callbacks suppressed [ 2049.345933] protocol 88fb is buggy, dev hsr_slave_0 [ 2049.356015] protocol 88fb is buggy, dev hsr_slave_1 13:24:57 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x930d, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf5, r1, 0x1, 0x9, 0x6, @broadcast}, 0x14) 13:24:57 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3d00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:24:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 13:24:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0xfffffffffffffffe) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x22000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x8, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={r4, 0xffff}, &(0x7f0000000340)=0x8) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000000c0)={r5, r0, 0x3, 0x18, &(0x7f0000000080)="841cf697d15ae128d15e9f500dca871a8f55d7ec46e6cd09", 0x0, 0x7, 0x0, 0x5e9588ec, 0x8, 0x3, 0x8, 'syz0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000380)={@rand_addr, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d, r7, r8}, {0xc7d0, 0x86, 0x100000000, 0x9, 0x9, 0xcc, 0x3, 0x5}, {0x8001, 0x100, 0x8001, 0x8}, 0x6, 0x6e6bb8, 0x2, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d5, 0xff}, 0xa, @in=@empty, 0x3502, 0x4, 0x3, 0x60a4799e, 0xf86, 0x5, 0xb8b}}, 0xe8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13:24:57 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x5f01000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 2049.530239] FAT-fs (loop2): bogus number of reserved sectors [ 2049.536378] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 13:24:58 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x3f00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 13:24:58 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x6800000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 13:24:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, r3) [ 2049.791620] FAT-fs (loop2): bogus number of reserved sectors [ 2049.809754] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2049.826507] protocol 88fb is buggy, dev hsr_slave_0 [ 2049.832107] protocol 88fb is buggy, dev hsr_slave_1 [ 2049.838617] protocol 88fb is buggy, dev hsr_slave_0 [ 2049.844269] protocol 88fb is buggy, dev hsr_slave_1 [ 2050.065810] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.070977] protocol 88fb is buggy, dev hsr_slave_1 [ 2050.076142] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.081210] protocol 88fb is buggy, dev hsr_slave_1 13:24:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) epoll_create(0x62) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) 13:24:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:24:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) 13:24:58 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7201000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) 13:24:58 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101502) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:24:58 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4101000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2050.442837] FAT-fs (loop2): bogus number of reserved sectors [ 2050.455691] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:24:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x200000) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000080)=0x7, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x287, 0x12, 0x0, 0x119) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x1, 0x3, 0xfc000, 0x0, 0x3f, 0x8, 0x7d, 0x8, 0x4, 0x1, 0x7, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, 0x8001, 0x1800000000000000}) 13:24:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x0, 0x0) [ 2050.537340] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2050.545194] FAT-fs (loop5): Filesystem has been set read-only [ 2050.607220] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 13:24:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 13:24:59 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01000000bfb57a"], 0x13) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x7b00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x400000002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000400)="39aacdbe0c1e50d06f1628d697563afb7aed4b96e13a0ee0edb0fcfebd125e1e357c0f", 0x0}, 0x18) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 2050.668828] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2050.688421] FAT-fs (loop2): bogus number of reserved sectors [ 2050.703680] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006500) [ 2050.711225] FAT-fs (loop2): Can't find a valid FAT filesystem 13:24:59 executing program 5: shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001a1c547a524377681f5e01"], 0xd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x9) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f0000000000)=0x4a00000000000000, 0x8080fffffffe) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb65, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) [ 2050.850039] BUG: unable to handle kernel paging request at ffff88804c3ea000 [ 2050.857213] #PF error: [PROT] [WRITE] [RSVD] [ 2050.861615] PGD b201067 P4D b201067 PUD 5ec77063 PMD 800000004c2001e3 [ 2050.868314] Oops: 000b [#1] PREEMPT SMP KASAN [ 2050.872813] CPU: 0 PID: 10400 Comm: syz-executor1 Not tainted 5.0.0-rc5+ #61 [ 2050.880001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2050.886835] kobject: 'loop5' (00000000ad750554): kobject_uevent_env [ 2050.889367] RIP: 0010:mmu_page_zap_pte+0x18a/0x250 [ 2050.889383] Code: 8b 73 28 4c 89 e7 48 83 c6 48 e8 b1 3f ff ff 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a4 00 00 00 <49> c7 04 24 00 00 00 00 41 be 01 00 00 00 e9 fd fe ff ff e8 3e 46 [ 2050.897797] kobject: 'loop5' (00000000ad750554): kobject_uevent_env [ 2050.900721] RSP: 0018:ffff8880569bfb40 EFLAGS: 00010246 [ 2050.900733] RAX: dffffc0000000000 RBX: ffffea0002a2be00 RCX: ffffc90008008000 [ 2050.900742] RDX: 1ffff1100987d400 RSI: ffffffff810ed4f4 RDI: 0000000000000007 [ 2050.900756] RBP: ffff8880569bfb68 R08: ffff8880a01ce440 R09: ffffed1015d05bd0 [ 2050.919749] kobject: 'loop5' (00000000ad750554): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2050.926045] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: ffff88804c3ea000 [ 2050.926053] R13: 0000000000000004 R14: ffffc90014f44000 R15: 0000000000000000 [ 2050.926065] FS: 00007fe3c725a700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2050.926074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2050.926082] CR2: ffff88804c3ea000 CR3: 000000009bf5d000 CR4: 00000000001426f0 [ 2050.926093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2050.932768] kobject: 'loop0' (00000000d8ad9ae3): kobject_uevent_env [ 2050.938707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2050.938712] Call Trace: [ 2050.938741] kvm_mmu_prepare_zap_page+0x163/0x1170 [ 2050.938761] ? paging64_gva_to_gpa_nested+0x1d0/0x1d0 [ 2050.946390] kobject: 'loop0' (00000000d8ad9ae3): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2050.953329] kvm_mmu_invalidate_zap_all_pages+0x3ca/0x550 [ 2050.953347] kvm_arch_flush_shadow_all+0x16/0x20 [ 2050.963448] kobject: 'loop5' (00000000ad750554): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2050.970043] kvm_mmu_notifier_release+0x5c/0x90 [ 2050.970065] ? kvm_vcpu_on_spin+0x550/0x550 [ 2050.970080] mmu_notifier_unregister+0x137/0x410 [ 2050.970095] ? free_pages+0x46/0x50 [ 2050.978092] kobject: 'loop2' (00000000614d07e3): kobject_uevent_env [ 2050.985577] ? kvm_vcpu_on_spin+0x550/0x550 [ 2050.985595] kvm_put_kvm+0x553/0xc70 [ 2050.985613] ? kvm_vm_release+0x60/0x60 [ 2050.991741] kobject: 'loop2' (00000000614d07e3): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2050.998743] kvm_vcpu_release+0x7b/0xa0 [ 2050.998758] __fput+0x2df/0x8d0 [ 2050.998775] ____fput+0x16/0x20 [ 2050.998789] task_work_run+0x14a/0x1c0 [ 2051.015469] kobject: 'loop3' (000000000ee62367): kobject_uevent_env [ 2051.019703] exit_to_usermode_loop+0x273/0x2c0 [ 2051.019720] do_syscall_64+0x52d/0x610 [ 2051.019737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2051.031431] kobject: 'loop3' (000000000ee62367): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2051.032474] RIP: 0033:0x457ca7 [ 2051.032489] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2051.032500] RSP: 002b:00007fe3c7258098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2051.050160] kobject: 'loop3' (000000000ee62367): kobject_uevent_env [ 2051.052212] RAX: 0000000000000000 RBX: 0000000000000018 RCX: 0000000000457ca7 [ 2051.052221] RDX: 00007fe3c72586f0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 2051.052229] RBP: 0000000020017000 R08: 00007fe3c72580a0 R09: 000000000073bf00 [ 2051.052238] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 2051.052250] R13: 00000000ffffffff R14: 00000000004dbaa8 R15: 00000000ffffffff [ 2051.062151] kobject: 'loop3' (000000000ee62367): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2051.066341] Modules linked in: [ 2051.066357] CR2: ffff88804c3ea000 [ 2051.066370] ---[ end trace edc2667853f19a59 ]--- [ 2051.066395] RIP: 0010:mmu_page_zap_pte+0x18a/0x250 [ 2051.248957] Code: 8b 73 28 4c 89 e7 48 83 c6 48 e8 b1 3f ff ff 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 a4 00 00 00 <49> c7 04 24 00 00 00 00 41 be 01 00 00 00 e9 fd fe ff ff e8 3e 46 [ 2051.267857] RSP: 0018:ffff8880569bfb40 EFLAGS: 00010246 [ 2051.273219] RAX: dffffc0000000000 RBX: ffffea0002a2be00 RCX: ffffc90008008000 [ 2051.280486] RDX: 1ffff1100987d400 RSI: ffffffff810ed4f4 RDI: 0000000000000007 [ 2051.287749] RBP: ffff8880569bfb68 R08: ffff8880a01ce440 R09: ffffed1015d05bd0 [ 2051.295016] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: ffff88804c3ea000 [ 2051.302282] R13: 0000000000000004 R14: ffffc90014f44000 R15: 0000000000000000 [ 2051.309549] FS: 00007fe3c725a700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2051.317770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2051.323842] CR2: ffff88804c3ea000 CR3: 000000009bf5d000 CR4: 00000000001426f0 [ 2051.331124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2051.338463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2051.345901] Kernel panic - not syncing: Fatal exception [ 2051.352351] Kernel Offset: disabled [ 2051.355972] Rebooting in 86400 seconds..