4dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 465.066558][T14697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 465.076791][T14707] FAT-fs (loop5): Can't find a valid FAT filesystem [ 465.121936][T14700] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 465.152463][T14697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 465.183814][T14700] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 465.208373][T14697] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 465.392696][T14700] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 465.505507][T14685] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 465.533135][T14687] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 15:45:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 15:45:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 466.167365][T14749] FAT-fs (loop5): bogus number of reserved sectors [ 466.265063][T14749] FAT-fs (loop5): Can't find a valid FAT filesystem 15:45:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 466.587389][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 466.587402][ T27] audit: type=1326 audit(1588952738.395:555): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14769 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 15:45:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 467.133192][ T27] audit: type=1326 audit(1588952738.935:556): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14784 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 467.228471][T14794] FAT-fs (loop5): bogus number of reserved sectors 15:45:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 467.279435][ T27] audit: type=1326 audit(1588952739.085:557): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14788 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 467.298384][T14794] FAT-fs (loop5): Can't find a valid FAT filesystem 15:45:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x2}}, 0x28}}, 0x0) [ 467.412720][ T27] audit: type=1326 audit(1588952739.215:558): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14792 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 467.606928][ T27] audit: type=1326 audit(1588952739.415:559): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14795 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 467.854130][T14817] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 467.920991][T14817] FAT-fs (loop3): Filesystem has been set read-only 15:45:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 467.986079][T14817] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 468.005981][T14817] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 468.016434][T14817] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 468.059559][T14795] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x2}}, 0x28}}, 0x0) 15:45:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 468.159340][T14831] FAT-fs (loop5): bogus number of reserved sectors [ 468.178599][ T27] audit: type=1326 audit(1588952739.985:560): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14824 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 468.246337][T14831] FAT-fs (loop5): Can't find a valid FAT filesystem [ 468.274022][ T27] audit: type=1326 audit(1588952739.985:561): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14822 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 468.297827][ T27] audit: type=1326 audit(1588952740.085:562): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14828 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 468.558231][ T27] audit: type=1326 audit(1588952740.365:563): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14845 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x2}}, 0x28}}, 0x0) [ 468.818432][T14850] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 468.843367][T14850] FAT-fs (loop0): Filesystem has been set read-only [ 468.862236][T14850] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 468.901653][T14850] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 468.957673][T14850] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x2}}, 0x50}}, 0x0) [ 469.016817][ T27] audit: type=1326 audit(1588952740.825:564): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=14849 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 469.266212][T14845] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 469.311545][T14874] FAT-fs (loop5): bogus number of reserved sectors 15:45:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x2}}, 0x50}}, 0x0) [ 469.353310][T14874] FAT-fs (loop5): Can't find a valid FAT filesystem 15:45:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x2}}, 0x50}}, 0x0) [ 469.853720][T14890] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:45:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}], {0x14, 0x11, 0x2}}, 0x44}}, 0x0) [ 469.933991][T14890] FAT-fs (loop0): Filesystem has been set read-only [ 469.958614][T14898] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:45:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 470.001214][T14890] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 470.045325][T14898] FAT-fs (loop3): Filesystem has been set read-only [ 470.076004][T14898] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 470.116460][T14898] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 470.163826][T14898] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}], {0x14, 0x11, 0x2}}, 0x44}}, 0x0) [ 470.254008][T14913] FAT-fs (loop5): bogus number of reserved sectors [ 470.283860][T14913] FAT-fs (loop5): Can't find a valid FAT filesystem 15:45:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 470.399102][T14885] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}], {0x14, 0x11, 0x2}}, 0x44}}, 0x0) [ 470.539941][T14893] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x2}}, 0x48}}, 0x0) 15:45:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x2}}, 0x48}}, 0x0) 15:45:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x2}}, 0x48}}, 0x0) [ 471.310734][T14943] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:45:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x6, 0x401}, 0x14}}, 0x0) [ 471.414778][T14943] FAT-fs (loop3): Filesystem has been set read-only [ 471.422588][T14955] FAT-fs (loop5): bogus number of reserved sectors 15:45:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 471.473963][T14955] FAT-fs (loop5): Can't find a valid FAT filesystem [ 471.499028][T14943] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 471.519166][T14943] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 471.536537][T14943] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 471.698372][T14966] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 471.707593][T14936] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 471.754910][T14966] FAT-fs (loop2): Filesystem has been set read-only [ 471.803140][T14966] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:45:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x100000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3e3}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000005c0)='#vmnet1nodevem1\x00Gd\x8b&\xcch\x0f\f\xb0\xc0M\x86\xa0\xff\xc8\xe9\x80cP\xab\xfc\xdc\xc3\x1b\x0f\x02E\x1f\xd1\xef&*9\xc0\x1d\f\xc7\xae\xd2\xc0\r\xe8\xd5\xbe\x10\x84\xed\xfeG\xb6xOOW\x1cC]=P[V~\xee\a\xfca7\x1e\n\xf6?N\xe1\x19\xfda\x8a0\xb4\xea\xe0\a\xcf\xe9\xdb\xd20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x100000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3e3}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000005c0)='#vmnet1nodevem1\x00Gd\x8b&\xcch\x0f\f\xb0\xc0M\x86\xa0\xff\xc8\xe9\x80cP\xab\xfc\xdc\xc3\x1b\x0f\x02E\x1f\xd1\xef&*9\xc0\x1d\f\xc7\xae\xd2\xc0\r\xe8\xd5\xbe\x10\x84\xed\xfeG\xb6xOOW\x1cC]=P[V~\xee\a\xfca7\x1e\n\xf6?N\xe1\x19\xfda\x8a0\xb4\xea\xe0\a\xcf\xe9\xdb\xd20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 475.819318][ T27] audit: type=1326 audit(1588952747.496:584): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15020 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 475.978368][ T27] audit: type=1326 audit(1588952747.766:585): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15033 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 476.504967][ T27] audit: type=1326 audit(1588952747.786:586): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15035 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 15:45:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 476.727965][ T27] audit: type=1326 audit(1588952748.296:587): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15042 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 477.088288][T15057] FAT-fs (loop5): bogus number of reserved sectors [ 477.181695][T15057] FAT-fs (loop5): Can't find a valid FAT filesystem 15:45:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 15:45:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 477.712144][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 477.712159][ T27] audit: type=1326 audit(1588952749.516:590): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15074 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:49 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 477.963861][T15088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 477.964059][T15087] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 477.984547][ T27] audit: type=1326 audit(1588952749.576:591): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15075 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 478.021624][T15087] FAT-fs (loop0): Filesystem has been set read-only [ 478.032358][T15087] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 478.041002][T15088] FAT-fs (loop3): Filesystem has been set read-only [ 478.066107][T15088] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:49 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 478.118230][ T27] audit: type=1326 audit(1588952749.926:592): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15090 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 478.136404][T15088] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 478.154935][T15088] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:50 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 478.385170][T15074] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 478.393577][T15075] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 478.407946][T15099] FAT-fs (loop5): bogus number of reserved sectors [ 478.479324][T15099] FAT-fs (loop5): Can't find a valid FAT filesystem [ 478.703355][ T27] audit: type=1326 audit(1588952749.976:593): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15093 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 15:45:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:50 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 479.173477][ T27] audit: type=1326 audit(1588952750.976:594): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15120 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 479.301303][ T27] audit: type=1326 audit(1588952751.106:595): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 479.330911][ T27] audit: type=1326 audit(1588952751.126:596): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15121 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:51 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 15:45:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) 15:45:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 480.002038][ T27] audit: type=1326 audit(1588952751.806:597): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15157 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) 15:45:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 480.124358][T15168] FAT-fs (loop5): bogus number of reserved sectors [ 480.140795][T15164] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 480.149673][T15164] FAT-fs (loop2): Filesystem has been set read-only [ 480.167266][T15168] FAT-fs (loop5): Can't find a valid FAT filesystem [ 480.180689][T15164] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 480.264944][ T27] audit: type=1326 audit(1588952752.076:598): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15165 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 480.413496][T15176] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 480.432816][ T27] audit: type=1326 audit(1588952752.136:599): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15171 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 480.454463][T15176] FAT-fs (loop0): Filesystem has been set read-only 15:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x0) [ 480.462197][T15176] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 480.630905][T15157] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:45:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:45:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:45:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 481.108140][T15220] FAT-fs (loop5): bogus number of reserved sectors [ 481.115231][T15220] FAT-fs (loop5): Can't find a valid FAT filesystem [ 481.138856][T15213] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 481.182306][T15213] FAT-fs (loop2): Filesystem has been set read-only 15:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 481.260588][T15213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:45:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 481.349949][T15227] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 481.381759][T15227] FAT-fs (loop0): Filesystem has been set read-only [ 481.382106][T15213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 481.408513][T15227] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 481.458863][T15227] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 481.477184][T15213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 481.530712][T15227] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 481.655887][T15206] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 15:45:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 481.728723][T15244] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 481.798723][T15244] FAT-fs (loop3): Filesystem has been set read-only 15:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 481.853051][T15244] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 481.896931][T15217] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 482.169578][T15267] FAT-fs (loop5): bogus number of reserved sectors [ 482.199573][T15267] FAT-fs (loop5): Can't find a valid FAT filesystem 15:45:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 482.326576][T15269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) [ 482.406990][T15269] FAT-fs (loop0): Filesystem has been set read-only [ 482.447036][T15269] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 482.656715][T15286] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 482.665640][T15286] FAT-fs (loop3): Filesystem has been set read-only [ 482.672534][T15258] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 482.673045][T15286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 482.721433][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 482.721445][ T27] audit: type=1326 audit(1588952754.526:611): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15285 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 482.753057][T15258] FAT-fs (loop2): Filesystem has been set read-only 15:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 15:45:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 482.854747][T15263] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 15:45:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) [ 483.113826][T15306] FAT-fs (loop5): bogus number of reserved sectors [ 483.143743][T15306] FAT-fs (loop5): Can't find a valid FAT filesystem [ 483.178736][ T27] audit: type=1326 audit(1588952754.986:612): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15299 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 483.217898][ T27] audit: type=1326 audit(1588952754.986:613): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15297 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 483.231745][T15277] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) [ 483.392670][T15315] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 483.395049][ T27] audit: type=1326 audit(1588952755.076:614): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15303 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 483.430884][T15312] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 483.455461][T15315] FAT-fs (loop2): Filesystem has been set read-only [ 483.488177][T15312] FAT-fs (loop0): Filesystem has been set read-only 15:45:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 483.505003][T15315] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 483.539545][T15312] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 483.562867][T15315] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 483.600338][T15312] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 483.651693][T15315] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 483.666031][ T27] audit: type=1326 audit(1588952755.476:615): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15322 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 483.731179][T15312] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) [ 483.859683][T15297] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 483.884676][T15299] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 484.055797][ T27] audit: type=1326 audit(1588952755.746:616): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15329 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) [ 484.345399][T15334] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 484.353265][T15334] FAT-fs (loop3): Filesystem has been set read-only 15:45:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) [ 484.477714][T15345] FAT-fs (loop5): bogus number of reserved sectors [ 484.485373][T15345] FAT-fs (loop5): Can't find a valid FAT filesystem [ 484.554938][ T27] audit: type=1326 audit(1588952756.366:617): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15342 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 484.581972][ T27] audit: type=1326 audit(1588952756.366:618): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15341 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) 15:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) [ 484.692649][T15355] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 484.706928][ T27] audit: type=1326 audit(1588952756.516:619): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15353 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 484.786570][T15355] FAT-fs (loop0): Filesystem has been set read-only [ 484.897717][T15355] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 484.918106][ T27] audit: type=1326 audit(1588952756.726:620): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15359 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) 15:45:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0xd, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000000)=0x10) 15:45:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:57 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000002c00270d000000000000000005000000", @ANYRES32=r5, @ANYBLOB="00000000000000000800f1ff08000100753332"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002d006d54007a08b267ae3604b5000000", @ANYRES32=r5, @ANYBLOB="00080080000000000800f1ff"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 485.516633][T15394] FAT-fs (loop5): invalid media value (0x00) [ 485.564695][T15394] FAT-fs (loop5): Can't find a valid FAT filesystem [ 485.717993][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:45:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 485.832908][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.062849][T15402] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 486.161870][T15402] FAT-fs (loop0): Filesystem has been set read-only [ 486.190340][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 15:45:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 486.282574][T15402] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 486.384227][T15402] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:45:58 executing program 4: 15:45:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:58 executing program 4: [ 486.755618][T15445] FAT-fs (loop5): invalid media value (0x00) [ 486.762247][T15445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 487.138581][T15465] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 487.147805][T15465] FAT-fs (loop3): Filesystem has been set read-only [ 487.156178][T15465] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:59 executing program 4: 15:45:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:45:59 executing program 4: 15:45:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 487.749694][T15454] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:45:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 487.798010][T15483] FAT-fs (loop5): invalid media value (0x00) 15:45:59 executing program 4: 15:45:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14d"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 487.889528][T15483] FAT-fs (loop5): Can't find a valid FAT filesystem [ 487.915255][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 487.915275][ T27] audit: type=1326 audit(1588952759.726:632): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15481 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:45:59 executing program 4: [ 488.208127][ T27] audit: type=1326 audit(1588952759.876:633): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15490 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 488.299495][ T27] audit: type=1326 audit(1588952760.106:634): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15493 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 488.583058][ T27] audit: type=1326 audit(1588952760.206:635): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 488.779417][T15510] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:00 executing program 4: [ 488.878754][T15510] FAT-fs (loop0): Filesystem has been set read-only [ 488.885731][T15510] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 488.897650][T15494] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14d"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 489.068963][ T27] audit: type=1326 audit(1588952760.876:636): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15512 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:00 executing program 4: 15:46:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:01 executing program 4: [ 489.267103][ T27] audit: type=1326 audit(1588952760.956:637): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15521 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 489.315553][T15523] FAT-fs (loop5): invalid media value (0x00) [ 489.328940][ T27] audit: type=1326 audit(1588952761.066:638): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15514 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 489.353324][T15523] FAT-fs (loop5): Can't find a valid FAT filesystem [ 489.387653][T15516] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 489.405064][T15516] FAT-fs (loop3): Filesystem has been set read-only [ 489.418323][T15516] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 489.432498][T15516] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 489.446073][T15516] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 489.465930][ T27] audit: type=1326 audit(1588952761.156:639): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15518 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:01 executing program 4: [ 489.828798][ T27] audit: type=1326 audit(1588952761.637:640): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 489.891086][T15514] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14d"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:02 executing program 4: 15:46:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 490.447673][ T27] audit: type=1326 audit(1588952762.257:641): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15548 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:02 executing program 4: 15:46:02 executing program 4: [ 490.653420][T15561] FAT-fs (loop5): invalid media value (0x00) [ 490.674488][T15561] FAT-fs (loop5): Can't find a valid FAT filesystem [ 490.687155][T15567] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 491.397675][T15567] FAT-fs (loop2): Filesystem has been set read-only [ 491.405737][T15567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 491.414822][T15567] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:03 executing program 4: 15:46:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:03 executing program 4: [ 491.893477][T15610] FAT-fs (loop5): invalid media value (0x00) [ 491.899921][T15610] FAT-fs (loop5): Can't find a valid FAT filesystem 15:46:03 executing program 4: [ 491.971104][T15613] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 491.980299][T15613] FAT-fs (loop3): Filesystem has been set read-only [ 491.989479][T15613] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 491.999112][T15613] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 492.009660][T15613] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:03 executing program 4: 15:46:04 executing program 4: 15:46:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:04 executing program 4: 15:46:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 492.613292][T15605] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:04 executing program 4: 15:46:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:04 executing program 4: 15:46:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 492.906917][T15649] FAT-fs (loop5): invalid media value (0x00) [ 492.916037][T15643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000f00) [ 492.916531][T15649] FAT-fs (loop5): Can't find a valid FAT filesystem [ 492.942674][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 492.942686][ T27] audit: type=1326 audit(1588952764.747:653): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15641 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 492.979090][T15643] FAT-fs (loop2): Filesystem has been set read-only [ 493.030840][ T27] audit: type=1326 audit(1588952764.827:654): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15646 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 493.097591][T15643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 493.677246][T15658] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 493.685223][T15658] FAT-fs (loop3): Filesystem has been set read-only 15:46:05 executing program 4: 15:46:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 493.777670][T15643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 493.797783][ T27] audit: type=1326 audit(1588952765.577:655): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15654 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 493.909068][T15667] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 493.964868][T15667] FAT-fs (loop0): Filesystem has been set read-only 15:46:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:05 executing program 4: [ 494.046221][T15667] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 494.095282][T15667] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 494.118565][ T27] audit: type=1326 audit(1588952765.927:656): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15668 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:06 executing program 4: [ 494.168412][T15676] FAT-fs (loop5): invalid media value (0x00) [ 494.206738][T15676] FAT-fs (loop5): Can't find a valid FAT filesystem [ 494.236177][ T27] audit: type=1326 audit(1588952765.967:657): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15679 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 494.313243][ T27] audit: type=1326 audit(1588952766.037:658): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15671 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:06 executing program 4: [ 494.638322][ T27] audit: type=1326 audit(1588952766.167:659): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15672 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:06 executing program 4: 15:46:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 495.208480][ T27] audit: type=1326 audit(1588952767.017:660): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15698 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:07 executing program 4: [ 495.318112][ T27] audit: type=1326 audit(1588952767.047:661): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 495.398403][T15714] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:07 executing program 4: [ 495.446554][T15724] FAT-fs (loop5): invalid media value (0x00) [ 495.481289][T15714] FAT-fs (loop0): Filesystem has been set read-only [ 495.487142][ T27] audit: type=1326 audit(1588952767.117:662): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15701 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 495.526454][T15724] FAT-fs (loop5): Can't find a valid FAT filesystem [ 495.556159][T15714] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:07 executing program 4: [ 495.889748][T15710] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 495.920899][T15710] FAT-fs (loop2): Filesystem has been set read-only [ 495.932973][T15702] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:07 executing program 4: 15:46:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:08 executing program 4: 15:46:08 executing program 4: 15:46:08 executing program 4: 15:46:08 executing program 4: 15:46:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 497.241688][T15771] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 497.250475][T15771] FAT-fs (loop3): Filesystem has been set read-only 15:46:09 executing program 4: [ 498.467984][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 498.467998][ T27] audit: type=1326 audit(1588952770.277:672): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 498.479586][T15799] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 498.508079][T15799] FAT-fs (loop3): Filesystem has been set read-only 15:46:10 executing program 4: 15:46:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:10 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @loopback}, 0x10) 15:46:10 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 498.612515][ T27] audit: type=1326 audit(1588952770.397:673): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000011c0)=""/4116, 0x1014}], 0x1, 0x0) [ 498.824581][ T27] audit: type=1326 audit(1588952770.637:674): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15810 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 498.943566][ T27] audit: type=1326 audit(1588952770.747:675): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15822 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 499.393020][ T27] audit: type=1326 audit(1588952771.197:676): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15824 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 499.488082][T15809] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 499.493840][ T27] audit: type=1326 audit(1588952771.277:677): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15827 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 499.525919][T15809] FAT-fs (loop2): Filesystem has been set read-only 15:46:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2b"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket$kcm(0x11, 0x3, 0x300) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory', 0xea}]}, 0xfa38) 15:46:11 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 499.720959][ T27] audit: type=1326 audit(1588952771.527:678): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15844 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 499.983630][ T27] audit: type=1326 audit(1588952771.757:679): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 500.278295][ T27] audit: type=1326 audit(1588952772.067:680): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15860 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 500.458965][T15851] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 500.466989][T15851] FAT-fs (loop3): Filesystem has been set read-only 15:46:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2b"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 500.711880][ T27] audit: type=1326 audit(1588952772.517:681): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15867 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:12 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d03206023e0001a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x206) [ 501.514878][T15884] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 501.551990][T15884] FAT-fs (loop0): Filesystem has been set read-only 15:46:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2b"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 502.022781][T15917] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@remote, 0x0, r2}) [ 502.096287][T15917] FAT-fs (loop0): Filesystem has been set read-only [ 502.111560][T15917] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:14 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003600)="43abe0d984e51ead820231c53a90fa104be9a70e8bbcbb3ae24732fdc3d5982ce82abd65c3c74a2fa2f55455fe1a39225ccfb3793b694b11a79ac93f71648f6bcc9861598b9efc0192f78fca7da4ab121f82790e3a6880901368b4710da08e55776eb7ddd8f00a167ee50002f80b8439d11d81a69245fbf14bf940d236918ac281b669232276bcad8f7333cd65e07097b5e350e801c7f7207a136ac42cdb95452dff658a073b06aa43461c21da484c0168033c1c3ab0cde3cd278d2fc26b4baaff0e9557b81251bbeab482ff747afd1673d6eb5ab0a2476714649cec193e0a92cbb9c73fca432992879d6cd0138143ea86c04850f3b50b5d5cc9359fe4c96446978220c282ccd4163c11bd2d45361318494561377bc21df4a1d3f070aa2b1daaa3bef566d4785a7b60bd2555d5a6195682767c69f6513e46f84d3f81ce4316e5e9e8c6575e2af3f395a468d6f5cec96f8de692dc4bf1f7e1f5123a66f720c04cf1a54e515c199852673ae8d92150d07ab43f5764f01c63c8330e0cc8557e46ca51a7d8aaebe84ef8765b78cff95a0bfed1daac3cd1a4f5b88ade16a4b50abec0538a136e80c7a5a70b2fa857d5b1bc32166105843747183c51a942cd5d706ba587bdb44cca416d5f58ea3ada493f25535181f4f6278fee21046bee5355b617ed73510c00da19a28b1720ff9ce5fca07191e49299cb63ef02f6f713e5a431e5c60e6982d5438d5767efae070bf2e302388f1f89d5ac7406fcfd635da33c49c3ad237ac6dcdded418ffe06ac3f7218e686b123749a139ae590b6db8f7a1e88afdb56eac363a29254f0faa02bdef02a36db4beafb041b84dce08345f7d88d78a00c1a6dc017c26a9e7ae426d874f6f2300c3599b3da0d18547b999a38acafb97db8a471a51a2c3b4c06bd87630ae38ea1a39a0420141436f9f6933f9bea3488c5d897323438dacda688b019a89349601cdd42cd984ed70057b810c0a1b6f8630733a0ce3ede74425d972251ab3bd8e2a93cc209644692c633b85998bd706bd402a709baa4176ce43c7e9437395434c64dcdd0c43a0ec8d2391d9e81e52b777a41cd70f76e99d5d20e33481218ed2df1324dca4b86bc851071258e7cdeca763d8e0146247741e7fd2ff1b18062d21d396037840fd5767e245455f39bf3c57e7caab14078633ede3d2d6c2e22aca3fc6173359c9e3ab619adf0b1ba2f3f0fa85471ce5d6cad7dd0ef9b18f240733c0ea190ea517ba53bd9df5e3f4dd497829f139cd4ca2aff88536793b438beef0d52c810ff2f20db9b6c6b824453fc09324ef9748a8b605c7f3e08298f9bfb1691b8fdf853be290f8029d2ae9b9bea7fa0b409ac0e83911ef5676f53bff3f899c306c8ddbb73f8332ffbd80a91a52f1901ba1facfbe39bb44f2ee1bfa914d267b6cb77d2d382b6f776bb629cc65caadcee5ef286a157e432bad56e7a444d47d9badd34ad582f767ba6e1ee0e60dd8bdf765e9896ba0a7e9851fef370c90fc95627099b90e0833b1a9fd0d51e335d9fd3b8883426d3889010b08f21af6c76f337d8c11fed3c95d2122ea2ce3f2363410850d4e128829f1e737e447015df60c23b31f3aa8c01ede64159f2d7ec997c4fe3af86d14eb465175882291b6f5d46fa14099a869a4ef73ec5132238f84a90c8390e9602a466e9f2847d2ec15b7ce47edbf95d85d4bf75876578031be8acd592d3a309590a12c17e41d1ebc74c93c2735f7692e515e2a7366c2b0dbbebed592ba4487d8380822c1912606b47dfc819093afc8f5bc246ff04afc88528d852e8afbc9c3f904f6a05b6eed14361ea4ce0053e254f7acfc96ef03209bb2d268a05effdd11de4674d276d55f0e83e8531b189c6b85907d559c46fc52a1731abca61cc39c2fb0b439a9b285287830d53b26b96f4077ed601f797c29fd883c93e4eed5b1eaf5303ed5e34046ce700b00287367c2f3642072ff2cd26dbf98eb595a45b3e8cb16f81acd3256528295621c89d19df2101e9e609d2c33a8ed7a77d7162f839c092854537dac75a7da45050a4266d3c6b366f0a37400524a99d2b1e7215ac248e834ece53322c230535679f34dbed48cee24599435b8e66ba1bb14a079a6759f5fe892fb9e00da6bec093a16f23ac4939f7118d83b0", 0x5f0}, {&(0x7f0000001e00)="0d4399182283e4da8f78a778297fddf132d835cca979329fbc3bc759ca36670eb15eb002affb8f7ac9cb6508aa1fdf47d903c5d7067fc60681a677a6282d19f0ce16948a3aa877f322668bb9b2af27fe33a2eb6b4b8cf354174398da96719e6fde4e93d2b9a82f07d73caa5358e0d296d800481aedd2b1c0952e52addd2aa141549da22c1bef7996446d0ce5c061c5b87a7d99d960940c3f56efed3b9dfdd5e8aee7dfe42f1be1441de2987346845a5945427efae7a2617d2b78b9c602984c94ac5bdbdc7ebc09deb239228bef8856e60f70a79b076713946c39a1edf32b42834b543f05592ad95ec7347c392ee5e5174e757ee71a41917a23dc397cae2d9100c084f1a2caebeb20da4f4163c797c39588fbf731c1346bc80b1ea5eef7567a0d5416ee4a5a25d2f2ad6efc97abbbbcbea78beea51aa24ebd3877c8f9e642f43662ab1c121bd01fad5b2918a03144bdbd355936d2d1fc5bfa077e52992698ed4e538f176114d8e9ce1460bf6b3201eb50bf018d5264eb7e2e06d86b09f52578450df0eeb33aeeb058e61b6de6849ca370074d74e9dbe3a6738013253c2dcfaae3c2e843ba47f8c7796a1ffc93ad9fbd73954668dc4c74ec2cbb28cfa0a0150f6db4c70a2d8ad7da65385c52c1b79a8c75c2da4768bd482e1ba921929fd9f4a476209fd8d0cc64ac3a032733e3cf24f22c984e5fe6700f52cfd806534801ffc183ae063d41793473924cd9d4127bada5f64ab722afc5a522b69f51aa8b9479b64719c3f3e39a39d9bd2fd986ef83e4a1d8cc5dc194aaa863e29649bc9982930d469f943412cb1b526d953e935e76c8ff5ba47b8e30ffdbdffcf1cd4cee1b57c9f1eace2ea62f91f4c0d4f91b8fd6f88c96323ebb71322e1f90098d0268ab069298a0ffab64825fbdc819bdb6b5951589cabaf8d474d487bab9194398cf382df571ac5ca323370ecf1b60810bd38d70e13bd1b709525bb60baa4601ab76a169539f7f19eb4a67ea5dab75260b5dca2a071e3473cfb89dbc9f47d8de2fba37ce345309d2885e27827076bb6a2658bceb753042050f94f0b6e345ddb2240e00bba1b17da9848738d8a54ed3abac50a5c1b53a28e52edc65b8f11aa86de9aaba1970f08437291b95f1bec4939b1514f939a3a593fe2d81ae0069d973357a1cd09d578a6a8eea024d6e29687b73e3ae262523209dc6edd481c2aacac5f5c86878249575d98b96d0c279ffbb366d7c7a7f1b184ee38d981a91506b430138c0b2ae7be683ecad4b108721787ab5db7fafd6a79e3e535dbd52f07005d86b677bee2c5e0e6f0dae2e3720f199d58a38f0f3f950ce27b56919d87d6de0a017bc7c1352df0908d4bf065de2721720822fcfbfd761d485a16a69aa4bf43cc197f35412353633fc43adb8dca88b6fda35883615d6a5b5b9f0ad428fac9b6c4c5961dea66be227a2ffece8d27d33712b3ea52c8f2efd4f4f503b1c1acda1b4f1c3c0d76778756256503853e3a46fe67bf182d221060ddb288a11adebf6dd5a7b0dc1b6bf358cd87c9937754d2087d1353d20707e44048126ae5dbb8350ac549a78cd43bcb5796e24205e4a62a9b9d2a46dec548894262bd2b653bf0a620e53d3ceb21b2171cad33bfda832bbd031a116ce95b277fac83fd96787e625cdb6fbff6a38bf2087a3055fd2fd05213486bac171edfa89352cbab2eb9bdf2e12ffee8ba3d6270b4bc242b9f6e4104969712db59a324c520bdf763c478f30398b010220ad84977ac669f974854ccfeb0908bc557f4da9ea27bf01eef418218d636245881dcd576e43cc17611593d07a9e7cb7cdcd65346b164d1df95a083e438888ddb72cea1ccdf8819ccf683b8584052b4d2918ce1da2927f9396c91ff0f09f44b7be59213d0af03b60e4fa126fd46e675315e6331973aaabbc1b81a9cc650404cdaee7622f7039e6b5fed033e5f45bf6fa2845251ee97e6ab4960a4e3bb01b9ad47a1157960fa20417b009e06e55fb21d3e66ee4c6155a146f66392b29e1bb390a154b49b282155152a96851893393f71f76734de6e546abc3a226c0d287e4df5180b6395672aecaa2943e826ba2a712bb24f91f51a727631125468effa29ad5b52fee5be5facef26263e9929fb75a047cb8fc2c346e2164a84dd2439ebf5c0ee027bdfa3cd548352e0e9c234f417efd38cfc10ec150bf11f4cccb2f6b4ee87f1dce894978874b1f56f2b8606621b69fa960e6fca9f32fcc073d3ad1e5d07841ece41d6de052d8c67cd74381fc997c0f1eec46903614afa6f450923da21c70dbb3ac76c5d98555d24ebb076a7c499975300b5413f15d6d8d350539ed4db29510e8bee81c8d965ee0c004ce5d32e0200116c5fde4799d1c7d2da1c1b7cb6532569ce0a725a3fca13391099eaf794a698c6f4835bbc7f6869677000723d5dadfe8919844b6099b5fb4d0e40071227b41b683bf6c0bc2ea99d99c59e7fe8cceb0fae58ad71441c271fa9e0fcd7949d0d33beb83c4a1d3dfc20dcbcaead0b86d6e5504e6f0bb4dbc1126c47b4bd864d34616cf5115b783710202e81aaa7c5162416c88dca6e8190c1301caeab1db79d5bf1635b701d59c8466c25c9d81e899f223b9c056e57e76705d29418c8a09bdefd835976c32c6570812dab470ef650e5ffcc1973cba9eff7ae1c7080ae363b7409927a88012ab31f0d373cba8c446ae04d2762c5cf570e1eadf0a589e41be7152dde23a008d06be1f16f2778924bf4ed124d7bf70e73aee69d87c6227b4318b3acc856b8313c1984da75e4e13b36b147d4f363b57aa642c01dd3c944733ec1830d1da11d6bd62a08805134bda323c213d1615319516021a65efb08aa639555388ef84e1", 0x7e7}, {&(0x7f0000002600)="593ecc6debfb264a69a72bc1904873acf3448b8f3870de67e589f8ab9c5eb94b36add0a404c0acc0e44741ef1601551a876d3e97a1dacacbfd556948f9c507b84949ac7de39bc9580f047972564821aaf1a01c6ee78ee20d39c83c54f8fb5aff889fce2e825aa8700b30f70c3cc70a76fe680dc2dd159040714c148e948b8a6c2edd9cc62dee51b0e8e24811e9844fe2351052396f334b45ae3b4942228ddfa1b878b1f015e5975f80daa18ec15e7b045b72411126d5a81e738cbd1e1c2b9b8ad86d174adf79c224611cddca604bb8c2a289bc896473a229638cad9d5363d501b1056fbbdfa0fab0a630e1d0062ec063a2959a4aa5262f3e95450e4091c14854a59dcd0af1819e020ece96426ebcbfda5e5768df68862ef95a6806e09960e3789b1bf5f625430cf266fbf8b241b4d1d9fc3c4dd72386c4043f6c9f9cdb41f37a6911e7b7a1636e9194f51e723b6d68e17cd3494c4766372b522419eca9fb9fd525b5fe9de0b8d0bc06843e873e562ce7a36b51cb298b4868569e5592f3a8db5638e6cd7540461e4e7b7bab7be27701e9504f3de2ff902a06011cdc0e706d2148fafb6fd3de8ebf18621d82b42262fffaad43626a7ad0eb5d150c576cbf7e2ec667445b66948599c88641f16a83ccd02bd78fe07260561637f32fe913bfc5eb23e1a8ba7b0b006be8b6b0c71a57fc32079f793e78e0132a9d17f0960d2ddf1ba9c6f355c086b922f08d2bae6eaa73a7810382ae06b924e68e9722c599439bc43b2d47af5cd45e8d0c633bb42ddc6a02029765a947ca043bc4c648d68e7870a128d4adefc1d40ecf456099cf1345cb648d60ab28dcd3f435fe1359b38fe5b238c120494135486db1a1d37de5a9351ca8931ab044360dbe1fb646ff2fdbe6f7a26294730f568bd64b2db0978d6b9449c262c4767e6e4f0b121ca4e5c4a540ea304a32fdcd217dc8e8390a7b8f3256911813e8166a5661c09cf9e09e727aaf7d6188997c71e4c42341f78e0c189434c9f42c2f7506387c25c50a149bd086f50e38fe0873560d60b106fe1a3c41d2970ea7213434e129af56451a23fff2eaa7369deb80516a535e7872ab78b97e586ca8e4761c08047b962ed8967d4a4acb9945fd80ee1acc8e807b4948aa75ed26e4fb5e67c5e9d113d07688f09811d80891b16cb308072088e7c5b4e1f4a719dcbd38d443be6ff795e8044d658a6eda61d48d1f092a2db6195d72f744ccaa9c224ca58d96188928a9bc76660b09d95e7f0a189543ae10a7697a1ab086b13eb1718fb7d09e9fe14a33dc4fda8b99503369ac88c32b74ab2e1fd1be9da711c257ff12a8ccad1e7c491487b4f43a5d2467382ef6673dc9e7b44a0f327da27d1f25b0d0dc6405f3eb479b6f0c8c9796e39f0c3c0f1f2c13fcea477f9a744186c016b2fef6f7894e4555559e8bb8081bf74ab140b957a11da307bfb76e6fa737a6b4154da7314b2ee2bbe5244ad687b8d0263dd69a6f4cbb776e99012ff75ed76eb5ce976970d410cf8d2de496b33c779388acebd01f400f7f64dc133b5f3ea1602b2f04c3b90c2d4680019b1263ccd28bb546bcd8e29b3713307e4e", 0x465}], 0x3}}], 0x1, 0xc091) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1451}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) 15:46:14 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 502.629535][T15908] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 502.681648][T15919] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 502.877552][T15919] FAT-fs (loop2): Filesystem has been set read-only 15:46:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 503.082411][T15930] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 503.090395][T15930] FAT-fs (loop3): Filesystem has been set read-only 15:46:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0ef"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) [ 503.609857][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 503.609869][ T27] audit: type=1326 audit(1588952775.397:693): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15949 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 503.665925][ T27] audit: type=1326 audit(1588952775.457:694): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15951 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:15 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 504.196960][ T27] audit: type=1326 audit(1588952776.007:695): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15971 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0ef"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 504.522652][ T27] audit: type=1326 audit(1588952776.327:696): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15977 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:16 executing program 4: r0 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0xfd30) [ 504.638868][ T27] audit: type=1326 audit(1588952776.447:697): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15986 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 504.776378][ T27] audit: type=1326 audit(1588952776.467:698): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15988 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 505.397903][ T27] audit: type=1326 audit(1588952776.467:699): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15989 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0ef"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) [ 505.581983][ T27] audit: type=1326 audit(1588952777.387:700): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16016 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 505.694522][ T27] audit: type=1326 audit(1588952777.507:701): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 505.735848][ T27] audit: type=1326 audit(1588952777.537:702): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16022 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:18 executing program 4: syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @link_local, @val={@void}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x91, [@dev]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 15:46:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:18 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000000fdfdffff00"}) 15:46:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:18 executing program 4: open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) utime(&(0x7f0000000000)='./bus\x00', 0x0) 15:46:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 507.488620][T16099] 9pnet: p9_fd_create_unix (16099): problem connecting socket: ./file1: -111 15:46:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 507.608835][T16100] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 507.670580][T16111] 9pnet: p9_fd_create_unix (16111): problem connecting socket: ./file1: -111 [ 507.690997][T16100] FAT-fs (loop0): Filesystem has been set read-only [ 507.712322][T16100] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 507.947987][T16120] 9pnet: p9_fd_create_unix (16120): problem connecting socket: ./file1: -111 15:46:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 508.110234][T16129] 9pnet: p9_fd_create_unix (16129): problem connecting socket: ./file1: -111 15:46:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 508.151378][T16094] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 508.387923][T16133] 9pnet: p9_fd_create_unix (16133): problem connecting socket: ./file1: -111 15:46:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 508.725804][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 508.725816][ T27] audit: type=1326 audit(1588952780.538:716): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:20 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 508.925186][ T27] audit: type=1326 audit(1588952780.598:717): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16142 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 509.216311][ T27] audit: type=1326 audit(1588952781.028:718): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16162 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 509.329802][T16170] 9pnet: p9_fd_create_unix (16170): problem connecting socket: ./file1: -111 15:46:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 509.430726][ T27] audit: type=1326 audit(1588952781.238:719): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16172 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 509.528316][ T27] audit: type=1326 audit(1588952781.338:720): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16173 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 509.561987][T16183] FAT-fs (loop1): bogus number of reserved sectors [ 509.620919][T16183] FAT-fs (loop1): Can't find a valid FAT filesystem [ 509.678083][T16191] 9pnet: p9_fd_create_unix (16191): problem connecting socket: ./file1: -111 [ 509.745863][ T27] audit: type=1326 audit(1588952781.468:721): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16182 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 509.871722][T16199] 9pnet: p9_fd_create_unix (16199): problem connecting socket: ./file1: -111 [ 509.936771][ T27] audit: type=1326 audit(1588952781.718:722): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16193 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 510.224232][T16204] 9pnet: p9_fd_create_unix (16204): problem connecting socket: ./file1: -111 15:46:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 510.458666][ T27] audit: type=1326 audit(1588952782.268:723): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16205 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 510.563740][T16222] FAT-fs (loop1): bogus number of reserved sectors 15:46:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 510.610541][T16222] FAT-fs (loop1): Can't find a valid FAT filesystem [ 510.620141][ T27] audit: type=1326 audit(1588952782.308:724): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16206 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 510.640940][T16232] 9pnet: p9_fd_create_unix (16232): problem connecting socket: ./file1: -111 15:46:22 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 510.796172][ T27] audit: type=1326 audit(1588952782.468:725): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16216 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 511.016953][T16242] 9pnet: p9_fd_create_unix (16242): problem connecting socket: ./file1: -111 15:46:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 511.164440][T16207] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 511.194553][T16207] FAT-fs (loop2): Filesystem has been set read-only 15:46:23 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 511.394741][T16253] 9pnet: p9_fd_create_unix (16253): problem connecting socket: ./file1: -111 15:46:23 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 511.511734][T16259] FAT-fs (loop1): bogus number of reserved sectors [ 511.517412][T16252] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 511.536595][T16259] FAT-fs (loop1): Can't find a valid FAT filesystem [ 511.543851][T16252] FAT-fs (loop5): Filesystem has been set read-only [ 511.561808][T16252] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 511.601492][T16252] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 511.698909][T16270] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 511.730477][T16275] 9pnet: p9_fd_create_unix (16275): problem connecting socket: ./file1: -111 [ 511.738476][T16252] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:23 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 511.762584][T16270] FAT-fs (loop0): Filesystem has been set read-only [ 511.771394][T16270] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 511.947614][T16282] 9pnet: p9_fd_create_unix (16282): problem connecting socket: ./file1: -111 15:46:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 512.041043][T16245] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:23 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 512.188255][T16267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 512.213734][T16267] FAT-fs (loop2): Filesystem has been set read-only 15:46:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 512.299640][T16261] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 512.308983][T16291] 9pnet: p9_fd_create_unix (16291): problem connecting socket: ./file1: -111 15:46:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:24 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 512.405558][T16294] FAT-fs (loop1): bogus number of reserved sectors [ 512.419223][T16294] FAT-fs (loop1): Can't find a valid FAT filesystem [ 512.425742][T16292] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 512.446189][T16292] FAT-fs (loop5): Filesystem has been set read-only [ 512.467074][T16292] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 512.477571][T16292] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 512.487756][T16292] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 512.650275][T16313] 9pnet: p9_fd_create_unix (16313): problem connecting socket: ./file1: -111 15:46:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 512.971088][T16325] 9pnet: p9_fd_create_unix (16325): problem connecting socket: ./file1: -111 [ 513.032629][T16287] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 513.370050][T16315] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 513.468946][T16315] FAT-fs (loop2): Filesystem has been set read-only 15:46:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 513.640913][T16331] 9pnet: p9_fd_create_unix (16331): problem connecting socket: ./file1: -111 15:46:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 513.751706][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 513.751719][ T27] audit: type=1326 audit(1588952785.558:738): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16330 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 513.820612][T16336] FAT-fs (loop1): bogus number of reserved sectors [ 513.926024][T16336] FAT-fs (loop1): Can't find a valid FAT filesystem [ 514.026862][T16334] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 514.074796][ T27] audit: type=1326 audit(1588952785.578:739): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16333 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 514.102097][T16334] FAT-fs (loop5): Filesystem has been set read-only [ 514.112733][T16355] 9pnet: p9_fd_create_unix (16355): problem connecting socket: ./file1: -111 15:46:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 514.134044][ T27] audit: type=1326 audit(1588952785.738:740): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16338 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 514.182845][T16334] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 514.217139][T16334] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 514.270129][ T27] audit: type=1326 audit(1588952786.078:741): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16354 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 514.298977][T16334] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 514.326890][ T27] audit: type=1326 audit(1588952786.078:742): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16356 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 514.415245][T16333] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 514.416595][T16368] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 514.433253][T16368] FAT-fs (loop3): Filesystem has been set read-only [ 514.441137][T16368] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 514.461601][T16367] 9pnet: p9_fd_create_unix (16367): problem connecting socket: ./file1: -111 15:46:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 514.629336][T16372] FAT-fs (loop1): bogus number of reserved sectors [ 514.656361][T16372] FAT-fs (loop1): Can't find a valid FAT filesystem [ 514.675872][ T27] audit: type=1326 audit(1588952786.488:743): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16371 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 514.797123][T16385] 9pnet: p9_fd_create_unix (16385): problem connecting socket: ./file1: -111 [ 514.808312][ T27] audit: type=1326 audit(1588952786.578:744): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16376 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 514.967627][T16356] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 515.212565][ T27] audit: type=1326 audit(1588952786.949:745): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16386 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 515.298889][T16398] 9pnet: p9_fd_create_unix (16398): problem connecting socket: ./file1: -111 [ 515.345129][ T27] audit: type=1326 audit(1588952787.089:746): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16393 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 515.827361][ T27] audit: type=1326 audit(1588952787.629:747): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16399 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 516.084495][T16416] 9pnet: p9_fd_create_unix (16416): problem connecting socket: ./file1: -111 [ 516.130602][T16414] FAT-fs (loop1): bogus number of reserved sectors 15:46:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 516.189188][T16414] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 516.457404][T16422] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 516.541946][T16441] 9pnet: p9_fd_create_unix (16441): problem connecting socket: ./file1: -111 [ 516.640887][T16422] FAT-fs (loop3): Filesystem has been set read-only 15:46:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 516.718982][T16422] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 516.785441][T16422] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 516.815653][T16422] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 516.959703][T16421] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 517.042564][T16451] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 517.077674][T16454] 9pnet: p9_fd_create_unix (16454): problem connecting socket: ./file1: -111 [ 517.130449][T16451] FAT-fs (loop2): Filesystem has been set read-only 15:46:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 517.193012][T16451] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 517.262089][T16455] FAT-fs (loop1): bogus number of reserved sectors [ 517.300091][T16455] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 517.390119][T16466] 9pnet: p9_fd_create_unix (16466): problem connecting socket: ./file1: -111 15:46:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 517.643544][T16477] 9pnet: p9_fd_create_unix (16477): problem connecting socket: ./file1: -111 15:46:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 518.295176][T16492] FAT-fs (loop1): bogus number of reserved sectors 15:46:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 518.347382][T16492] FAT-fs (loop1): Can't find a valid FAT filesystem [ 518.478494][T16497] 9pnet: p9_fd_create_unix (16497): problem connecting socket: ./file1: -111 15:46:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 518.766402][T16506] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 518.774836][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 518.774851][ T27] audit: type=1326 audit(1588952790.579:761): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 518.886439][T16520] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 518.895752][T16520] FAT-fs (loop3): Filesystem has been set read-only [ 518.903251][T16520] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 518.935872][T16506] FAT-fs (loop5): Filesystem has been set read-only [ 518.945664][T16506] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 519.206626][ T27] audit: type=1326 audit(1588952791.019:762): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16524 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(0x0, 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 519.278436][T16525] FAT-fs (loop1): bogus number of reserved sectors [ 519.285667][T16525] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 519.407622][ T27] audit: type=1326 audit(1588952791.219:763): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16530 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 519.542356][T16511] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 519.644472][T16537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 519.661482][T16537] FAT-fs (loop2): Filesystem has been set read-only [ 519.669149][T16537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 519.867883][ T27] audit: type=1326 audit(1588952791.679:764): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16546 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 520.183123][ T27] audit: type=1326 audit(1588952791.689:765): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16541 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 520.336250][ T27] audit: type=1326 audit(1588952791.839:766): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16550 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 520.442302][T16567] FAT-fs (loop1): bogus number of reserved sectors [ 520.495847][ T27] audit: type=1326 audit(1588952792.309:767): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16564 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 520.504185][T16567] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 520.683903][T16555] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 520.700452][T16569] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 520.704156][ T27] audit: type=1326 audit(1588952792.409:768): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16565 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 520.816447][T16555] FAT-fs (loop0): Filesystem has been set read-only [ 520.838838][T16569] FAT-fs (loop2): Filesystem has been set read-only 15:46:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 520.881376][ T27] audit: type=1326 audit(1588952792.689:769): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16581 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 520.912579][T16569] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 521.190918][T16565] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 521.204536][ T27] audit: type=1326 audit(1588952793.019:770): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16585 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 521.410313][T16596] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 521.538321][T16596] FAT-fs (loop3): Filesystem has been set read-only 15:46:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 521.605153][T16610] FAT-fs (loop1): bogus number of reserved sectors [ 521.617584][T16596] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 521.621520][T16610] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) 15:46:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 522.042682][T16629] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 522.070588][T16628] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 522.085926][T16629] FAT-fs (loop5): Filesystem has been set read-only [ 522.103896][T16628] FAT-fs (loop2): Filesystem has been set read-only [ 522.121987][T16628] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=unix,', {[{@version_L='version=9p2000.L'}]}}) [ 522.162074][T16629] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) [ 522.264633][T16629] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) 15:46:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 522.391832][T16652] 9pnet_virtio: no channels available for device ./file1 [ 522.396189][T16635] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 522.428903][T16629] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 522.472395][T16635] FAT-fs (loop3): Filesystem has been set read-only [ 522.509930][T16635] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 522.545321][T16653] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 522.556275][T16616] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 522.565694][T16617] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 522.577532][T16653] FAT-fs (loop0): Filesystem has been set read-only 15:46:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 522.612656][T16653] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 522.650677][T16657] 9pnet_virtio: no channels available for device ./file1 15:46:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 522.656246][T16653] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 522.674979][T16653] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, 0x0) [ 522.703987][T16658] FAT-fs (loop1): bogus number of reserved sectors [ 522.711016][T16658] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 523.004312][T16669] 9pnet_virtio: no channels available for device ./file1 15:46:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 523.058963][T16644] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,'}) [ 523.378361][T16678] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 523.493252][T16678] FAT-fs (loop5): Filesystem has been set read-only 15:46:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 523.572542][T16691] 9pnet: p9_fd_create_unix (16691): problem connecting socket: ./file1: -111 [ 523.644845][T16678] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,'}) 15:46:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 523.949588][T16701] 9pnet: p9_fd_create_unix (16701): problem connecting socket: ./file1: -111 15:46:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$9p_unix(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,'}) [ 523.997095][T16702] FAT-fs (loop1): bogus number of reserved sectors [ 524.044043][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 524.044066][ T27] audit: type=1326 audit(1588952795.860:782): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16699 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 524.059555][T16702] FAT-fs (loop1): Can't find a valid FAT filesystem [ 524.110945][ T27] audit: type=1326 audit(1588952795.920:783): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16700 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 524.256822][T16717] 9pnet: p9_fd_create_unix (16717): problem connecting socket: ./file1: -111 [ 524.337198][ T27] audit: type=1326 audit(1588952796.150:784): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16711 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 524.714495][ T27] audit: type=1326 audit(1588952796.530:785): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16723 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 524.803254][ T27] audit: type=1326 audit(1588952796.620:786): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16729 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 524.951168][ T27] audit: type=1804 audit(1588952796.760:787): pid=16741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir308090100/syzkaller.QzSEua/310/cgroup.controllers" dev="sda1" ino=15686 res=1 [ 525.010173][T16736] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 525.063247][ T27] audit: type=1800 audit(1588952796.810:788): pid=16741 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=15686 res=0 15:46:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 525.107591][T16736] FAT-fs (loop0): Filesystem has been set read-only [ 525.149194][T16736] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 525.179300][T16736] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, r3, 0x0) [ 525.192819][ T27] audit: type=1804 audit(1588952796.810:789): pid=16740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir308090100/syzkaller.QzSEua/310/cgroup.controllers" dev="sda1" ino=15686 res=1 [ 525.284102][T16736] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 525.284328][T16749] FAT-fs (loop1): bogus number of reserved sectors 15:46:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 525.362964][T16749] FAT-fs (loop1): Can't find a valid FAT filesystem [ 525.389040][ T27] audit: type=1804 audit(1588952796.910:790): pid=16740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir308090100/syzkaller.QzSEua/310/cgroup.controllers" dev="sda1" ino=15686 res=1 15:46:37 executing program 4: r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='devpts\x00', &(0x7f0000000100)='security&vmnet0\b', 0x0) [ 525.463961][ T27] audit: type=1804 audit(1588952796.950:791): pid=16741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir308090100/syzkaller.QzSEua/310/cgroup.controllers" dev="sda1" ino=15686 res=1 [ 525.545051][T16729] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r1, r0, 0x0, 0x40801001) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) 15:46:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 525.926944][T16782] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 525.935963][T16782] FAT-fs (loop3): Filesystem has been set read-only [ 525.944366][T16782] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 526.501039][T16773] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 526.581346][T16799] FAT-fs (loop1): bogus number of reserved sectors 15:46:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) [ 526.665185][T16799] FAT-fs (loop1): Can't find a valid FAT filesystem [ 526.690198][T16801] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 526.753930][T16801] FAT-fs (loop2): Filesystem has been set read-only [ 526.764441][T16801] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 526.773268][T16801] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 526.782789][T16801] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 526.785301][T16792] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 526.826701][T16792] FAT-fs (loop0): Filesystem has been set read-only 15:46:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 527.160528][T16790] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r2, r0) 15:46:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 527.636060][T16837] FAT-fs (loop1): bogus number of reserved sectors 15:46:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 527.684066][T16837] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:39 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r2, r0) 15:46:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0xf8, 0x0, 0x0, 0xf8, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@socket3={{0x28, 'socket\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 15:46:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 528.115491][T16863] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 528.124583][T16863] FAT-fs (loop3): Filesystem has been set read-only [ 528.133024][T16863] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 528.397941][T16865] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 528.414178][T16846] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 528.428629][T16865] FAT-fs (loop5): Filesystem has been set read-only 15:46:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 528.450927][T16846] FAT-fs (loop2): Filesystem has been set read-only [ 528.477844][T16871] xt_TCPMSS: Only works on TCP SYN packets [ 528.515792][T16865] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 528.545730][T16876] xt_TCPMSS: Only works on TCP SYN packets [ 528.556389][T16865] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:40 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0xd0, 0x1d0, 0xd0, 0x0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0xffffffff, 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) [ 528.592210][T16875] FAT-fs (loop1): bogus number of reserved sectors [ 528.642348][T16865] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 528.651628][T16875] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 528.716461][T16852] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 528.766253][T16853] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 528.781661][T16887] ipt_CLUSTERIP: no config found for 172.20.20.187, need 'new' 15:46:40 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x901, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x4000}, 0x0) [ 529.105013][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 529.105028][ T27] audit: type=1326 audit(1588952800.920:810): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16900 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 529.464814][T16886] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 529.473180][T16886] FAT-fs (loop0): Filesystem has been set read-only 15:46:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 529.649530][ T27] audit: type=1326 audit(1588952801.410:811): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16905 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 529.815987][T16924] FAT-fs (loop1): invalid media value (0x00) [ 529.830064][T16924] FAT-fs (loop1): Can't find a valid FAT filesystem [ 529.922994][ T27] audit: type=1326 audit(1588952801.740:812): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16921 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 530.009599][T16922] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 530.017932][T16922] FAT-fs (loop5): Filesystem has been set read-only 15:46:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2484c0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0xbf) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f00000000c0)={0xa, 0x4e22, 0x200020, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) sendto$inet6(r2, &(0x7f00000002c0)='\b', 0x1, 0x3fffffa, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{}, '\x00', "2026b200", "008ed800", "d3ff7f00"}, 0x28) 15:46:42 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x298, 0x0, 0x128, 0x0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@cluster={{0x30, 'cluster\x00'}, {0x0, 0x4}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@local, @remote, 0x0, 0x0, 'gre0\x00', 'dummy0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) [ 530.301029][ T27] audit: type=1326 audit(1588952802.120:813): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16938 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 530.420939][T16956] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 530.429642][T16956] FAT-fs (loop3): Filesystem has been set read-only [ 530.439112][T16956] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 530.449015][T16956] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 530.459016][T16956] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 530.503139][ T27] audit: type=1326 audit(1588952802.160:814): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16941 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 530.536218][T16963] xt_cluster: node mask cannot exceed total number of nodes [ 530.569235][T16953] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 530.601174][T16961] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 530.617920][T16953] FAT-fs (loop2): Filesystem has been set read-only [ 530.625272][ T27] audit: type=1326 audit(1588952802.180:815): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16939 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 530.648974][T16961] FAT-fs (loop5): Filesystem has been set read-only [ 530.659794][T16953] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 530.674802][T16961] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 530.706573][T16961] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:42 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='X', 0x1}], 0x1) [ 530.722308][ T27] audit: type=1326 audit(1588952802.310:816): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16942 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 530.725765][T16969] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 530.778845][T16961] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 530.803400][T16969] FAT-fs (loop0): Filesystem has been set read-only [ 530.814456][T16969] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 530.854473][T16971] FAT-fs (loop1): invalid media value (0x00) [ 530.870017][T16971] FAT-fs (loop1): Can't find a valid FAT filesystem [ 530.924864][ T27] audit: type=1326 audit(1588952802.740:817): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:42 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4040004) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle, @fd={0x73622a85}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@mcast1, 0x4e}) 15:46:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 531.005924][T16938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 531.033195][T16941] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 531.078259][T16942] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 531.216317][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 531.239446][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.248670][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.261350][T16986] binder: 16982:16986 ioctl 8936 20000040 returned -22 [ 531.351919][ T27] audit: type=1326 audit(1588952803.170:818): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 531.432246][T16986] binder: BINDER_SET_CONTEXT_MGR already set [ 531.438324][T16986] binder: 16982:16986 ioctl 40046207 0 returned -16 [ 531.462696][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 531.592002][T16986] binder: BINDER_SET_CONTEXT_MGR already set 15:46:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 531.653262][T17007] binder: 16982:17007 unknown command 511 [ 531.660478][ T27] audit: type=1326 audit(1588952803.450:819): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16992 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 531.734002][T16986] binder: 16982:16986 ioctl 40046207 0 returned -16 [ 531.814526][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.831585][T17007] binder: 16982:17007 ioctl c0306201 20000280 returned -22 15:46:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 532.024672][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.033646][T16999] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 532.042165][T16999] FAT-fs (loop3): Filesystem has been set read-only [ 532.234776][T17027] FAT-fs (loop1): invalid media value (0x00) [ 532.286751][T17027] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:44 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4040004) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle, @fd={0x73622a85}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@mcast1, 0x4e}) 15:46:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 532.391639][ T9970] binder: unexpected work type, 4, not freed [ 532.532589][T17040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 532.563939][T17040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.574185][T17040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:46:44 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4040004) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle, @fd={0x73622a85}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@mcast1, 0x4e}) [ 532.946678][T17058] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 533.059484][T17060] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 533.087260][T17058] FAT-fs (loop0): Filesystem has been set read-only [ 533.110307][T17062] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 533.129232][T17060] FAT-fs (loop5): Filesystem has been set read-only [ 533.147017][T17062] FAT-fs (loop2): Filesystem has been set read-only [ 533.163100][T17060] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 533.165375][T17058] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 533.182603][T17062] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 533.213325][T17060] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 533.226778][T17066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.245997][T17058] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 533.261536][T17060] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 533.270833][T17067] binder: 17065:17067 ioctl 8936 20000040 returned -22 [ 533.306714][T17058] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 533.306884][T17066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.371422][T17066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.372160][T17070] FAT-fs (loop1): invalid media value (0x00) [ 533.398042][T17070] FAT-fs (loop1): Can't find a valid FAT filesystem [ 533.517527][T17048] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 533.560284][T17047] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 533.658646][T17081] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 533.667408][T17081] FAT-fs (loop3): Filesystem has been set read-only [ 533.675388][T17081] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 533.685444][T17081] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 533.694883][T17081] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:45 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4040004) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle, @fd={0x73622a85}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x1000000, 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000040)={@mcast1, 0x4e}) [ 533.730279][ T2782] binder: unexpected work type, 4, not freed 15:46:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 534.013185][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 534.034809][T17098] binder: 17087:17098 ioctl 8936 20000040 returned -22 [ 534.065112][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.124826][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.144708][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 534.144721][ T27] audit: type=1326 audit(1588952805.951:831): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17092 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 534.197842][T17104] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 534.217443][T17104] FAT-fs (loop2): Filesystem has been set read-only [ 534.226871][T17074] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 534.228488][T17104] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 534.290131][T17102] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 534.316841][T17104] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 534.345801][T17102] FAT-fs (loop0): Filesystem has been set read-only [ 534.365501][T17108] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000f00) [ 534.374022][T17104] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 534.404011][T17102] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 534.414368][T17108] FAT-fs (loop5): Filesystem has been set read-only [ 534.450448][T17108] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 534.633688][ T27] audit: type=1326 audit(1588952806.441:832): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17111 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 534.681062][T17114] FAT-fs (loop1): invalid media value (0x00) [ 534.696493][T17086] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 534.718500][T17089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:46:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 534.749170][ T27] audit: type=1326 audit(1588952806.551:833): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17110 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 534.778450][T17092] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 534.867479][T17114] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:46 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 15:46:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 535.068301][ T9970] binder: unexpected work type, 4, not freed [ 535.277644][ T27] audit: type=1326 audit(1588952807.081:834): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 535.564143][ T27] audit: type=1326 audit(1588952807.371:835): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17132 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 535.603663][ T27] audit: type=1326 audit(1588952807.401:836): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17136 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 535.747378][T17151] FAT-fs (loop1): invalid media value (0x00) [ 535.843247][T17151] FAT-fs (loop1): Can't find a valid FAT filesystem [ 535.866593][T17161] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 535.866632][ T27] audit: type=1326 audit(1588952807.571:837): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17152 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 535.866669][T17161] FAT-fs (loop3): Filesystem has been set read-only [ 535.879342][ T27] audit: type=1326 audit(1588952807.661:838): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17143 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 535.897738][T17161] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 535.933167][T17161] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007900)={0x0, 0x0, &(0x7f00000078c0)={&(0x7f00000073c0)=ANY=[@ANYBLOB="34010000170019030000000000000000ff0100000000000000000000000000010000000000000000ff020000000000000000000000000001fe800000000000000000000000000000ac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000800000000000ff0200000000000000000000000000896d9c0d31cd9d0e7fa301000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015"], 0x134}}, 0x0) [ 535.943833][T17161] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 536.057636][T17150] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 536.128601][T17150] FAT-fs (loop5): Filesystem has been set read-only 15:46:48 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(r0, 0x4, 0x2000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 536.175054][T17150] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 536.486437][ T27] audit: type=1326 audit(1588952808.291:839): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17169 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 536.528398][T17152] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 536.645310][ T27] audit: type=1326 audit(1588952808.371:840): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17176 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 537.063804][T17205] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 537.072697][T17205] FAT-fs (loop3): Filesystem has been set read-only [ 537.081609][T17205] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 537.095976][T17205] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 537.106196][T17205] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 537.144640][T17199] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:46:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 537.206283][T17200] FAT-fs (loop1): invalid media value (0x00) [ 537.218153][T17199] FAT-fs (loop5): Filesystem has been set read-only 15:46:49 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(r0, 0x4, 0x2000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 537.283633][T17200] FAT-fs (loop1): Can't find a valid FAT filesystem [ 537.297220][T17199] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 537.442585][T17184] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 537.688754][T17195] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:46:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:50 executing program 4: 15:46:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 538.697067][T17244] FAT-fs (loop1): invalid media value (0x00) [ 538.732606][T17244] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:50 executing program 4: [ 539.189572][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 539.189587][ T27] audit: type=1326 audit(1588952810.991:850): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17259 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:51 executing program 4: 15:46:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 539.555666][ T27] audit: type=1326 audit(1588952811.321:851): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17264 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 539.654242][ T27] audit: type=1326 audit(1588952811.461:852): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17268 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:51 executing program 4: 15:46:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 540.311820][ T27] audit: type=1326 audit(1588952812.121:853): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17287 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 540.357584][T17291] FAT-fs (loop1): invalid media value (0x00) [ 540.379158][ T27] audit: type=1326 audit(1588952812.181:854): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17288 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 540.502861][T17291] FAT-fs (loop1): Can't find a valid FAT filesystem 15:46:52 executing program 4: [ 540.714025][ T27] audit: type=1326 audit(1588952812.521:855): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17302 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:52 executing program 4: 15:46:53 executing program 4: [ 541.235231][ T27] audit: type=1326 audit(1588952813.041:856): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17313 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 541.362949][ T27] audit: type=1326 audit(1588952813.071:857): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17315 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:53 executing program 4: [ 542.104936][ T27] audit: type=1326 audit(1588952813.272:858): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17321 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 542.194008][ T27] audit: type=1326 audit(1588952813.292:859): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17327 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:54 executing program 4: 15:46:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:54 executing program 4: 15:46:54 executing program 4: 15:46:54 executing program 4: [ 542.651956][T17352] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 542.668851][T17352] FAT-fs (loop0): Filesystem has been set read-only [ 542.680170][T17352] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 543.137171][T17347] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:46:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000005e00)='/dev/dlm_plock\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 15:46:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 543.573746][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 15:46:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000540)="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", 0x155, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000180)={0x0, "93e1d86a6fb37b04cc1053eecc196be5a4bb571fe68c6280e34d0e11dc1dcc3f", 0x3}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x802, 0x0) [ 545.074063][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 545.074076][ T27] audit: type=1800 audit(1588952816.882:869): pid=17434 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16163 res=0 [ 545.114270][ T27] audit: type=1326 audit(1588952816.922:870): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17425 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 545.135985][ T27] audit: type=1326 audit(1588952816.922:871): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17427 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 545.881456][ T27] audit: type=1326 audit(1588952816.952:872): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17424 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 545.980306][T17434] MINIX-fs: mounting unchecked file system, running fsck is recommended 15:46:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 546.145374][ T27] audit: type=1326 audit(1588952817.672:873): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17426 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 546.209352][T17452] minix_free_inode: bit 1 already cleared 15:46:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 546.317248][ T27] audit: type=1326 audit(1588952817.892:874): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17450 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 546.398979][ T27] audit: type=1326 audit(1588952818.212:875): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17462 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 546.440699][T17452] Process accounting resumed [ 546.529475][T17464] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 546.629620][ T27] audit: type=1326 audit(1588952818.212:876): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17461 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0xa3, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "7a7a37e790c73b19d51ea343d3142840e2d14e3be9f4e9db1cfd1bf63b520f232e60264e8b95b958ed612ba757ca06f2faf2b1b9ab7d96663e7f45c882d63c65", "fa7793c6786d34090a192ac27cacc3e58ed4ffe31fd432385559fdb5026656ee"}) [ 546.836658][T17464] FAT-fs (loop5): Filesystem has been set read-only [ 546.992484][T17464] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 547.104550][ T27] audit: type=1326 audit(1588952818.302:877): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17466 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:46:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 547.180318][T17464] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:46:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 547.400047][ T27] audit: type=1326 audit(1588952819.212:878): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17485 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:46:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000000000004"], 0x14}, 0x1, 0x4000000000000000}, 0x0) 15:47:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:00 executing program 4: 15:47:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:00 executing program 4: 15:47:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 549.299015][T17563] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 549.307695][T17563] FAT-fs (loop5): Filesystem has been set read-only [ 549.315024][T17563] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:47:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 549.941879][T17555] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:47:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 549.985095][T17565] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:47:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x44200, 0x0) [ 550.097860][T17565] FAT-fs (loop0): Filesystem has been set read-only 15:47:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 550.158600][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 550.158612][ T27] audit: type=1326 audit(1588952821.972:889): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17577 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 550.363636][T17585] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 550.483992][ T27] audit: type=1326 audit(1588952822.002:890): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17584 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 550.556111][T17585] FAT-fs (loop2): Filesystem has been set read-only [ 550.722404][T17585] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:47:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 550.854428][T17585] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 550.899956][ T27] audit: type=1326 audit(1588952822.442:891): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17591 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 551.086609][T17618] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 551.095335][T17618] FAT-fs (loop3): Filesystem has been set read-only [ 551.103069][T17618] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:03 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d00800002c00ffffff7f0a000410ffffa6fffff7", @ANYRES32, @ANYBLOB="0000000bf1ffffff"], 0x8d0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 15:47:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 551.207989][ T27] audit: type=1326 audit(1588952822.602:892): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17593 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 551.409081][ T27] audit: type=1326 audit(1588952822.783:893): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17613 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 551.503518][T17629] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.4'. 15:47:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 551.570664][T17640] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.4'. 15:47:03 executing program 4: r0 = socket(0x25, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) [ 551.650344][ T27] audit: type=1326 audit(1588952823.103:894): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17620 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 551.725998][T17641] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 551.736295][T17641] FAT-fs (loop2): Filesystem has been set read-only [ 551.744599][T17641] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 551.744609][T17613] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x1, 0x0) [ 551.911521][ T27] audit: type=1326 audit(1588952823.353:895): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17627 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 552.022530][ T27] audit: type=1326 audit(1588952823.573:896): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 552.058348][ T27] audit: type=1326 audit(1588952823.813:897): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17648 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 552.123069][ T27] audit: type=1326 audit(1588952823.933:898): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17653 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 552.694409][T17660] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 552.702520][T17660] FAT-fs (loop5): Filesystem has been set read-only [ 552.780556][T17662] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 552.788489][T17662] FAT-fs (loop3): Filesystem has been set read-only [ 552.813045][T17627] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:47:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 553.511696][T17695] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 553.519049][T17688] ISOFS: Unable to identify CD-ROM format. [ 553.535945][T17695] FAT-fs (loop3): Filesystem has been set read-only [ 553.549895][T17695] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 553.564163][T17695] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 553.654485][T17695] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 553.816699][T17676] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 553.859161][T17676] FAT-fs (loop5): Filesystem has been set read-only [ 553.929743][T17672] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 554.104443][T17708] ISOFS: Unable to identify CD-ROM format. 15:47:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 554.730691][T17724] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 554.852660][T17724] FAT-fs (loop5): Filesystem has been set read-only [ 554.940563][T17724] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 555.046872][T17749] ISOFS: Unable to identify CD-ROM format. [ 555.100127][T17724] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 555.169723][T17724] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:47:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 555.261776][T17724] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) 15:47:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 555.539347][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 555.539359][ T27] audit: type=1326 audit(1588952827.353:909): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 555.682514][ T27] audit: type=1326 audit(1588952827.493:910): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17761 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 555.703288][T17758] ISOFS: Unable to identify CD-ROM format. [ 555.917388][ T27] audit: type=1326 audit(1588952827.533:911): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17760 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 556.208192][ T27] audit: type=1326 audit(1588952827.563:912): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 556.454813][ T27] audit: type=1326 audit(1588952827.863:913): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17782 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 558.879963][ T27] audit: type=1326 audit(1588952830.693:914): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17799 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 559.009544][ T27] audit: type=1326 audit(1588952830.703:915): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17797 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 559.122809][ T27] audit: type=1326 audit(1588952830.753:916): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17798 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 559.222101][ T27] audit: type=1326 audit(1588952831.033:917): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17812 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 559.254841][T17810] ISOFS: Unable to identify CD-ROM format. [ 559.317827][ T27] audit: type=1326 audit(1588952831.083:918): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17813 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 559.658808][T17833] ISOFS: Unable to identify CD-ROM format. 15:47:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 560.076064][T17851] ISOFS: Unable to identify CD-ROM format. 15:47:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 561.031423][T17840] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 561.047958][T17870] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 561.055860][T17870] FAT-fs (loop5): Filesystem has been set read-only 15:47:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 561.103724][T17840] FAT-fs (loop0): Filesystem has been set read-only [ 561.324607][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 561.324622][ T27] audit: type=1326 audit(1588952833.134:924): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17879 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 561.809409][T17880] ISOFS: Unable to identify CD-ROM format. 15:47:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 562.100731][ T27] audit: type=1326 audit(1588952833.914:925): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17897 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 562.153130][ T27] audit: type=1326 audit(1588952833.914:926): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17894 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 562.449184][ T27] audit: type=1326 audit(1588952833.954:927): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17895 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 562.594855][T17927] ISOFS: Unable to identify CD-ROM format. [ 562.769815][ T27] audit: type=1326 audit(1588952833.954:928): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17896 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 563.097447][ T27] audit: type=1326 audit(1588952834.364:929): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17926 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 563.246484][T17934] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000500) [ 563.254370][T17934] FAT-fs (loop5): Filesystem has been set read-only 15:47:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 563.624484][T17944] ISOFS: Unable to identify CD-ROM format. [ 563.762912][ T27] audit: type=1326 audit(1588952835.574:930): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17947 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:15 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 563.950096][ T27] audit: type=1326 audit(1588952835.574:931): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17945 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 564.081071][T17979] ISOFS: Unable to identify CD-ROM format. [ 564.126546][ T27] audit: type=1326 audit(1588952835.614:932): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17948 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:16 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 564.280900][ T27] audit: type=1326 audit(1588952835.624:933): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17946 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 564.708752][T17985] ISOFS: Unable to identify CD-ROM format. 15:47:16 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 565.651300][T18025] ISOFS: Unable to identify CD-ROM format. 15:47:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:17 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 566.922706][T18044] ISOFS: Unable to identify CD-ROM format. [ 567.056947][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 567.056959][ T27] audit: type=1326 audit(1588952838.874:943): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18057 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:18 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 567.369017][T18077] ISOFS: Unable to identify CD-ROM format. [ 567.414951][ T27] audit: type=1326 audit(1588952839.224:944): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18067 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 567.603235][ T27] audit: type=1326 audit(1588952839.224:945): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18068 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:19 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 567.828961][ T27] audit: type=1326 audit(1588952839.384:947): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18073 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 567.852368][ T27] audit: type=1326 audit(1588952839.384:946): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18084 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 568.064706][T18068] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 568.095242][T18068] FAT-fs (loop0): Filesystem has been set read-only 15:47:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 568.274152][T18101] ISOFS: Unable to identify CD-ROM format. 15:47:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 568.493754][ T27] audit: type=1326 audit(1588952840.304:948): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18105 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 568.789934][ T27] audit: type=1326 audit(1588952840.384:949): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18109 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 569.187983][ T27] audit: type=1326 audit(1588952840.654:950): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18114 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 569.209897][ T27] audit: type=1326 audit(1588952840.664:951): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18108 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 569.386724][ T27] audit: type=1326 audit(1588952840.684:952): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18110 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 569.493248][T18146] ISOFS: Unable to identify CD-ROM format. 15:47:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 570.167401][T18180] ISOFS: Unable to identify CD-ROM format. 15:47:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 570.348120][T18177] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:47:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, 0x0, 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 570.427181][T18177] FAT-fs (loop3): Filesystem has been set read-only [ 570.491990][T18177] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 570.532518][T18177] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 570.574713][T18177] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 570.595855][T18170] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 570.889396][T18196] ISOFS: Unable to identify CD-ROM format. 15:47:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 571.081905][T18211] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 571.117030][T18211] FAT-fs (loop2): Filesystem has been set read-only [ 571.187529][T18211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 571.282447][T18211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 571.304721][T18222] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 571.313680][T18222] FAT-fs (loop3): Filesystem has been set read-only [ 571.322131][T18222] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 571.412354][T18211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 571.474813][T18224] ISOFS: Unable to identify CD-ROM format. [ 571.592677][T18200] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 571.610503][T18200] FAT-fs (loop0): Filesystem has been set read-only 15:47:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 571.717750][T18205] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:47:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 571.892285][T18212] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 572.165387][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 572.165399][ T27] audit: type=1326 audit(1588952843.975:965): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18247 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 572.285160][T18257] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 572.294011][T18257] FAT-fs (loop3): Filesystem has been set read-only [ 572.301933][T18257] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 572.311969][T18246] ISOFS: Unable to identify CD-ROM format. 15:47:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, 0x0, 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 572.471143][ T27] audit: type=1326 audit(1588952844.285:966): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18259 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 572.759538][ T27] audit: type=1326 audit(1588952844.575:967): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18266 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 572.774230][T18241] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) 15:47:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 572.832375][T18241] FAT-fs (loop0): Filesystem has been set read-only [ 572.868729][T18247] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 573.025975][ T27] audit: type=1326 audit(1588952844.815:968): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18274 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 573.132498][T18278] ISOFS: Unable to identify CD-ROM format. 15:47:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 573.537873][ T27] audit: type=1326 audit(1588952845.355:969): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18296 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 573.687356][ T27] audit: type=1326 audit(1588952845.375:970): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18288 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 573.710531][ T27] audit: type=1326 audit(1588952845.505:971): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18291 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 573.873078][ T27] audit: type=1326 audit(1588952845.685:972): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18309 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 573.976222][T18312] ISOFS: Unable to identify CD-ROM format. [ 574.129361][ T27] audit: type=1326 audit(1588952845.945:973): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18315 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 574.313464][T18296] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000500) [ 574.345080][T18296] FAT-fs (loop0): Filesystem has been set read-only 15:47:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 574.540734][ T27] audit: type=1326 audit(1588952846.355:974): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18328 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 574.697435][T18331] ISOFS: Unable to identify CD-ROM format. 15:47:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 575.306710][T18364] ISOFS: Unable to identify CD-ROM format. 15:47:27 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 575.751766][T18352] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 15:47:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0xd0) [ 575.969866][T18352] FAT-fs (loop2): Filesystem has been set read-only 15:47:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 576.186586][T18379] ISOFS: Unable to identify CD-ROM format. 15:47:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0xd0) 15:47:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 577.322103][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 577.322117][ T27] audit: type=1326 audit(1588952849.135:983): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 577.577915][T18425] ISOFS: Unable to identify CD-ROM format. 15:47:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 578.277246][ T27] audit: type=1326 audit(1588952849.155:984): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18428 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 578.281000][T18422] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 578.308628][T18422] FAT-fs (loop2): Filesystem has been set read-only 15:47:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 578.419308][ T27] audit: type=1326 audit(1588952849.185:985): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18424 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(0x0, 0xd0) 15:47:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 578.543061][ T27] audit: type=1326 audit(1588952849.365:986): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18431 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 578.600787][ T27] audit: type=1326 audit(1588952849.445:987): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18434 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 578.656207][ T27] audit: type=1326 audit(1588952850.415:988): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18454 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 578.851175][ T27] audit: type=1326 audit(1588952850.655:989): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 579.613269][ T27] audit: type=1326 audit(1588952851.425:990): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18459 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 581.707925][ T27] audit: type=1326 audit(1588952853.526:991): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18483 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 581.822454][ T27] audit: type=1326 audit(1588952853.616:992): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18477 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 582.442886][ T27] audit: type=1326 audit(1588952853.616:993): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18481 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0x0) 15:47:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 582.836514][ T27] audit: type=1326 audit(1588952853.636:994): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18480 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 583.621076][ T27] audit: type=1326 audit(1588952853.816:995): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18491 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 583.694748][ T27] audit: type=1326 audit(1588952854.636:996): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18522 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 583.731770][ T27] audit: type=1326 audit(1588952854.796:997): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18523 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 583.768897][ T27] audit: type=1326 audit(1588952855.586:998): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18539 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) [ 584.069081][ T27] audit: type=1326 audit(1588952855.886:999): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18549 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 584.149252][ T27] audit: type=1326 audit(1588952855.956:1000): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 584.311306][T18569] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 584.349307][T18569] FAT-fs (loop3): Filesystem has been set read-only [ 584.456935][T18569] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 584.471268][T18569] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 584.482680][T18569] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 584.710140][ T27] audit: type=1326 audit(1588952856.006:1001): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18554 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 584.755295][T18554] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 15:47:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700000400000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0x0) 15:47:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 584.968580][ T27] audit: type=1326 audit(1588952856.166:1002): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18562 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 15:47:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid'}}]}) 15:47:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700000400000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0x0) [ 586.411099][T18636] ISOFS: Unable to identify CD-ROM format. 15:47:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:47:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbd"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700000400000000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000e00000008000100627066001800020006000400000000000400050008000600", @ANYRES32, @ANYBLOB="cb4db0ad47ff9bdf3c2fda9ca4404be571d0ca5343574fde31653b677f473a9b3883141536ced1f92bea14cbbd91318775875cbb55c7be32fb198004bdf35656237e0599ad21e94a2708f1eab26ff6e4d8c4ab876b22f521be5b333128251f187465d24642e952f757fc8c104cf2c6f9d79e9044016bce8aac43b0ad2b2d2c2dd0b67fb83b6b000000e9f2aa1d8e6f5ffde268ac6e0de625ceed7cd0487c1d0ade51014f21fcdfb9e39b4034f90396114ff6d1658865a0abd859485876c9ef0d8391937f264215c709bab4ba040b5a4c5fff775a3ee1603f2a68f6f50ad7b7cd94369229"], 0x44}}, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) 15:47:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000637620003555e5689d91b3f672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6ea7678e5afb9424b2bf0efbdb149c1a23e220ad9d351dfe3e72624dc453c4fa48c51897de17340d79c06386c3fd5e3a7e1f08fc86a5c00e1ab1461c7b686d4f33a45"], 0x6d) unlink(&(0x7f0000001e00)='./bus\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000300)='./file0\x00', 0xd0) [ 587.487581][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 587.487596][ T27] audit: type=1326 audit(1588952859.306:1012): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 587.583944][T18681] ISOFS: Unable to identify CD-ROM format. [ 587.662994][ T27] audit: type=1326 audit(1588952859.476:1013): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=18686 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0 [ 692.785483][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 692.792485][ C1] (detected by 1, t=10502 jiffies, g=58593, q=62) [ 692.798985][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295006366-4294995863), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 692.812337][ C1] syz-executor.5 R running task 26864 18706 7569 0x00004000 [ 692.820358][ C1] Call Trace: [ 692.823632][ C1] [ 692.826680][ C1] sched_show_task.cold+0x2e2/0x343 [ 692.831942][ C1] ? can_nice.part.0+0x10/0x10 [ 692.836805][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 692.842430][ C1] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 692.848356][ C1] rcu_sched_clock_irq.cold+0xb9b/0xcfa [ 692.854326][ C1] update_process_times+0x25/0x60 [ 692.859761][ C1] tick_sched_handle+0x9b/0x180 [ 692.864614][ C1] tick_sched_timer+0x4e/0x140 [ 692.869381][ C1] __hrtimer_run_queues+0x5ca/0xed0 [ 692.874601][ C1] ? tick_sched_do_timer+0x1a0/0x1a0 [ 692.880297][ C1] ? do_raw_spin_lock+0x129/0x2e0 [ 692.885326][ C1] ? hrtimer_init+0x320/0x320 [ 692.890005][ C1] ? ktime_get_update_offsets_now+0x2d6/0x450 [ 692.896075][ C1] hrtimer_interrupt+0x312/0x770 [ 692.901164][ C1] smp_apic_timer_interrupt+0x15b/0x600 [ 692.906802][ C1] apic_timer_interrupt+0xf/0x20 [ 692.911734][ C1] [ 692.914749][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2e/0x50 [ 692.920916][ C1] Code: 25 00 1f 02 00 65 8b 15 08 f0 8e 7e 81 e2 00 01 1f 00 48 8b 34 24 75 2b 8b 90 d8 13 00 00 83 fa 02 75 20 48 8b 88 e0 13 00 00 <8b> 80 dc 13 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 [ 692.940954][ C1] RSP: 0018:ffffc90016fcf520 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 692.949366][ C1] RAX: ffff88809f6ba080 RBX: 0000000000000001 RCX: ffffc90013d7e000 [ 692.957354][ C1] RDX: 0000000000000002 RSI: ffffffff817e6f45 RDI: 0000000000000005 [ 692.965349][ C1] RBP: 000000000045c829 R08: ffff88809f6ba080 R09: ffffed1015ce7104 [ 692.973323][ C1] R10: ffff8880ae73881b R11: ffffed1015ce7103 R12: ffffc90016fcf600 [ 692.981317][ C1] R13: 0000000000000000 R14: ffff88809f6ba080 R15: ffff88805868aeff [ 692.989401][ C1] ? is_bpf_text_address+0x95/0x160 [ 692.994630][ C1] is_bpf_text_address+0x95/0x160 [ 692.999806][ C1] kernel_text_address+0x6e/0xe0 [ 693.004796][ C1] __kernel_text_address+0x9/0x30 [ 693.010117][ C1] unwind_get_return_address+0x5a/0xa0 [ 693.015606][ C1] ? profile_setup.cold+0xc1/0xc1 [ 693.020760][ C1] arch_stack_walk+0x84/0xd0 [ 693.025393][ C1] stack_trace_save+0x8c/0xc0 [ 693.031922][ C1] ? stack_trace_consume_entry+0x160/0x160 [ 693.037833][ C1] save_stack+0x1b/0x40 [ 693.042026][ C1] ? save_stack+0x1b/0x40 [ 693.046379][ C1] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 693.052934][ C1] ? __kmalloc+0x14b/0x7a0 [ 693.057589][ C1] ? iter_file_splice_write+0x168/0xb00 [ 693.063272][ C1] ? direct_splice_actor+0x115/0x160 [ 693.068679][ C1] ? splice_direct_to_actor+0x38c/0x980 [ 693.074245][ C1] ? do_splice_direct+0x1b4/0x280 [ 693.079399][ C1] ? do_sendfile+0x555/0xc50 [ 693.084049][ C1] ? __x64_sys_sendfile64+0x149/0x210 [ 693.089522][ C1] ? do_syscall_64+0xf6/0x7d0 [ 693.094243][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 693.100343][ C1] ? print_usage_bug+0x240/0x240 [ 693.105344][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 693.110904][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 693.116902][ C1] ? mark_held_locks+0x9f/0xe0 [ 693.121682][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 693.127145][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 693.132440][ C1] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 693.138000][ C1] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 693.143720][ C1] ? retint_kernel+0x2b/0x2b [ 693.148319][ C1] ? kasan_unpoison_shadow+0x30/0x40 [ 693.153600][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 693.159236][ C1] __kmalloc+0x14b/0x7a0 [ 693.163488][ C1] ? iter_file_splice_write+0x168/0xb00 [ 693.169283][ C1] ? atime_needs_update+0x491/0x5f0 [ 693.174501][ C1] iter_file_splice_write+0x168/0xb00 [ 693.179898][ C1] ? atime_needs_update+0x5f0/0x5f0 [ 693.185154][ C1] ? page_cache_pipe_buf_release+0x280/0x280 [ 693.191142][ C1] ? add_to_pipe+0x3a0/0x3a0 [ 693.195752][ C1] ? page_cache_pipe_buf_release+0x280/0x280 [ 693.201735][ C1] direct_splice_actor+0x115/0x160 [ 693.206879][ C1] splice_direct_to_actor+0x38c/0x980 [ 693.212274][ C1] ? generic_pipe_buf_nosteal+0x10/0x10 [ 693.217876][ C1] ? do_splice_to+0x160/0x160 [ 693.222646][ C1] ? lock_acquire+0x267/0x8f0 [ 693.227342][ C1] do_splice_direct+0x1b4/0x280 [ 693.232199][ C1] ? splice_direct_to_actor+0x980/0x980 [ 693.237754][ C1] ? preempt_count_add+0x74/0x140 [ 693.242780][ C1] ? __this_cpu_preempt_check+0x28/0x190 [ 693.248771][ C1] do_sendfile+0x555/0xc50 [ 693.253331][ C1] ? do_compat_pwritev64+0x1b0/0x1b0 [ 693.259679][ C1] ? __might_fault+0x190/0x1d0 [ 693.264546][ C1] __x64_sys_sendfile64+0x149/0x210 [ 693.269942][ C1] ? __ia32_sys_sendfile+0x220/0x220 [ 693.275283][ C1] ? __ia32_sys_clock_settime+0x260/0x260 [ 693.281084][ C1] ? trace_hardirqs_off_caller+0x55/0x230 [ 693.286810][ C1] do_syscall_64+0xf6/0x7d0 [ 693.291326][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 693.297216][ C1] RIP: 0033:0x45c829 [ 693.301117][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 693.320743][ C1] RSP: 002b:00007ffbc0588c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 693.329686][ C1] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829 [ 693.337672][ C1] RDX: 00000000200001c0 RSI: 0000000000000005 RDI: 0000000000000005 [ 693.346547][ C1] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 693.354644][ C1] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 693.362637][ C1] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007ffbc05896d4 [ 693.370637][ C1] rcu: rcu_preempt kthread starved for 10560 jiffies! g58593 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 693.381929][ C1] rcu: RCU grace-period kthread stack dump: [ 693.387856][ C1] rcu_preempt R running task 28848 10 2 0x80004000 [ 693.395767][ C1] Call Trace: [ 693.399150][ C1] ? __schedule+0x937/0x1ff0 [ 693.403759][ C1] ? __sched_text_start+0x8/0x8 [ 693.408615][ C1] ? _raw_spin_lock_irqsave+0x94/0xbf [ 693.413986][ C1] ? debug_smp_processor_id+0x2f/0x185 [ 693.419447][ C1] schedule+0xd0/0x2a0 [ 693.423516][ C1] schedule_timeout+0x35c/0x850 [ 693.428365][ C1] ? find_held_lock+0x2d/0x110 [ 693.433128][ C1] ? usleep_range+0x160/0x160 [ 693.437806][ C1] ? rcu_gp_kthread+0x6fd/0x1960 [ 693.442746][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 693.448550][ C1] ? __next_timer_interrupt+0x190/0x190 [ 693.454185][ C1] ? prepare_to_swait_exclusive+0x110/0x110 [ 693.460086][ C1] rcu_gp_kthread+0x9bf/0x1960 [ 693.464855][ C1] ? rcu_barrier+0x4b0/0x4b0 [ 693.469468][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 693.475271][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 693.480555][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 693.485597][ C1] ? rcu_barrier+0x4b0/0x4b0 [ 693.490184][ C1] kthread+0x388/0x470 [ 693.494347][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 693.500068][ C1] ret_from_fork+0x24/0x30