&(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049004010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1c20) 06:42:39 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.607972][T29705] binder: 29700:29705 got transaction with invalid data ptr [ 654.631962][T29705] binder_transaction: 2 callbacks suppressed [ 654.631990][T29705] binder: 29700:29705 transaction failed 29201/-14, size 8192-0 line 3180 [ 654.637688][T29707] FAT-fs (loop4): bogus logical sector size 36868 06:42:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:39 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 654.647935][T26239] binder_release_work: 2 callbacks suppressed [ 654.647943][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 654.690509][T29707] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.782968][T29707] FAT-fs (loop4): bogus logical sector size 36868 [ 654.791120][T29707] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1c38) [ 654.848214][T29720] binder: 29717:29720 got transaction with invalid data ptr [ 654.861024][T29720] binder: 29717:29720 transaction failed 29201/-14, size 8192-0 line 3180 [ 654.909900][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:40 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049104010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:40 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1c50) [ 655.613216][T29739] FAT-fs (loop4): bogus logical sector size 37124 [ 655.623220][T29742] binder: 29732:29742 got transaction with invalid data ptr [ 655.644381][T29742] binder: 29732:29742 transaction failed 29201/-14, size 8192-0 line 3180 06:42:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 655.662273][T29739] FAT-fs (loop4): Can't find a valid FAT filesystem [ 655.682124][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:40 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1c68) [ 655.763656][T29739] FAT-fs (loop4): bogus logical sector size 37124 [ 655.770134][T29739] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.837328][T29756] binder: 29755:29756 got transaction with invalid data ptr [ 655.875754][T29756] binder: 29755:29756 transaction failed 29201/-14, size 8192-0 line 3180 [ 655.891822][T26239] binder: undelivered TRANSACTION_ERROR: 29201 06:42:41 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049204010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:41 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1c80) 06:42:41 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 656.619591][T29773] binder: 29766:29773 transaction failed 29189/-22, size 8192-0 line 2995 [ 656.629144][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:42:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 656.703777][T29775] FAT-fs (loop4): bogus logical sector size 37380 [ 656.710392][T29775] FAT-fs (loop4): Can't find a valid FAT filesystem [ 656.771424][T29785] binder: 29781:29785 transaction failed 29189/-22, size 8192-0 line 2995 [ 656.811104][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:42:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:41 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1c98) [ 656.821565][T29775] FAT-fs (loop4): bogus logical sector size 37380 [ 656.827997][T29775] FAT-fs (loop4): Can't find a valid FAT filesystem [ 656.924093][T29793] binder: 29791:29793 transaction failed 29189/-22, size 8192-0 line 2995 [ 656.939639][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:42:42 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049304010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TCFLSH(r0, 0x5437, 0x0) 06:42:42 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1cb0) 06:42:42 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(0xffffffffffffffff, 0x5437, 0x0) [ 657.657054][T29806] FAT-fs (loop4): bogus logical sector size 37636 [ 657.675686][T29806] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:42 executing program 3: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(0xffffffffffffffff, 0x5437, 0x0) [ 657.774275][T29806] FAT-fs (loop4): bogus logical sector size 37636 [ 657.788821][T29806] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:43 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1cc8) 06:42:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCFLSH(0xffffffffffffffff, 0x5437, 0x0) 06:42:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 658.612855][T29840] binder: 29836:29840 got transaction with invalid data ptr [ 658.620938][T29838] FAT-fs (loop4): bogus logical sector size 37892 [ 658.639605][T29838] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:43 executing program 0: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 658.669735][T29840] binder: 29836:29840 transaction failed 29201/-14, size 8192-0 line 3180 [ 658.709878][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:43 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 658.721700][T29838] FAT-fs (loop4): bogus logical sector size 37892 [ 658.740512][T29838] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1ce0) 06:42:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="000100000401821d0847cc122b98866100000f00000000000000"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x80002fc, 0x0) 06:42:44 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049504010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:44 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:44 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000004740)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x0, @local, 0x9}, 0x80, 0x0}, 0xe803) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001140)="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", 0x4cc}], 0x1}, 0x8000) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) 06:42:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1cf8) 06:42:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:44 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 659.646952][T29868] FAT-fs (loop4): bogus logical sector size 38148 [ 659.675467][T29868] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:44 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x1) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="9300000006"], 0x5) [ 659.764027][T29868] FAT-fs (loop4): bogus logical sector size 38148 [ 659.770502][T29868] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174049604010002000270f7f8", 0x16}], 0x800019, 0x0) [ 659.996586][T29897] binder: 29896:29897 got transaction with invalid data ptr [ 660.006888][T29897] binder: 29896:29897 transaction failed 29201/-14, size 8192-0 line 3180 [ 660.028746][T29898] FAT-fs (loop4): bogus logical sector size 38404 [ 660.042552][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 [ 660.069485][T29898] FAT-fs (loop4): Can't find a valid FAT filesystem [ 660.137149][T29898] FAT-fs (loop4): bogus logical sector size 38404 [ 660.145841][T29898] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:45 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1d10) 06:42:45 executing program 0: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) creat(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) pipe2(&(0x7f0000000000), 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xe2aa, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8000}, 0x0, 0x0, 0x0, 0x6, 0xfcd, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 06:42:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400b404010002000270f7f8", 0x16}], 0x800019, 0x0) [ 660.659499][T29910] binder: 29907:29910 got transaction with invalid data ptr [ 660.670751][T29911] FAT-fs (loop4): bogus logical sector size 46080 [ 660.688053][T29910] binder: 29907:29910 transaction failed 29201/-14, size 8192-0 line 3180 [ 660.699506][T29911] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 660.722282][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 660.782555][T29911] FAT-fs (loop4): bogus logical sector size 46080 [ 660.789020][T29911] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1d28) [ 660.871091][T29924] binder: 29921:29924 got transaction with invalid data ptr 06:42:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617425fc04010002000270f7f8", 0x16}], 0x800019, 0x0) [ 660.915087][T29924] binder: 29921:29924 transaction failed 29201/-14, size 8192-0 line 3180 [ 660.949879][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 661.076251][T29930] FAT-fs (loop4): bogus logical sector size 64549 [ 661.088191][T29930] FAT-fs (loop4): Can't find a valid FAT filesystem [ 661.126735][T29936] binder: 29935:29936 got transaction with invalid data ptr [ 661.138226][T29936] binder: 29935:29936 transaction failed 29201/-14, size 8192-0 line 3180 [ 661.160251][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 [ 661.168007][T29930] FAT-fs (loop4): bogus logical sector size 64549 [ 661.190899][T29930] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:46 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:46 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)='./file0\x00') 06:42:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1d40) 06:42:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000304010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 661.709903][T29952] binder: 29945:29952 got transaction with invalid data ptr [ 661.711136][T29948] FAT-fs (loop4): bogus logical sector size 768 [ 661.736255][T29952] binder: 29945:29952 transaction failed 29201/-14, size 8192-0 line 3180 [ 661.742831][T29948] FAT-fs (loop4): Can't find a valid FAT filesystem [ 661.776381][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 661.849895][T29948] FAT-fs (loop4): bogus logical sector size 768 [ 661.857965][T29948] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1d58) 06:42:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) [ 661.946894][T29964] binder: 29961:29964 got transaction with invalid data ptr [ 661.969822][T29966] binder: BINDER_SET_CONTEXT_MGR already set [ 661.989949][T29966] binder: 29962:29966 ioctl 40046207 0 returned -16 [ 661.997669][T29964] binder: 29961:29964 transaction failed 29201/-14, size 8192-0 line 3180 [ 662.024730][T29966] binder: 29962:29966 got transaction with invalid data ptr [ 662.037702][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 [ 662.044554][T29966] binder: 29962:29966 transaction failed 29201/-14, size 8192-0 line 3180 [ 662.080301][T26239] binder: undelivered TRANSACTION_ERROR: 29201 06:42:47 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000504010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1d70) 06:42:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 662.693121][T29980] binder: 29978:29980 got transaction with invalid data ptr [ 662.700933][T29980] binder: 29978:29980 transaction failed 29201/-14, size 8192-0 line 3180 [ 662.753199][T29987] binder: BINDER_SET_CONTEXT_MGR already set [ 662.786887][T29985] FAT-fs (loop4): bogus logical sector size 1280 [ 662.793564][T26239] binder: undelivered TRANSACTION_ERROR: 29201 06:42:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 662.800370][T29987] binder: 29982:29987 ioctl 40046207 0 returned -16 [ 662.800500][T29992] binder: 29982:29992 got transaction with invalid data ptr [ 662.822360][T29985] FAT-fs (loop4): Can't find a valid FAT filesystem [ 662.836587][T29992] binder: 29982:29992 transaction failed 29201/-14, size 8192-0 line 3180 [ 662.851209][T26239] binder: undelivered TRANSACTION_ERROR: 29201 06:42:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 662.889318][T29985] FAT-fs (loop4): bogus logical sector size 1280 [ 662.916819][T29985] FAT-fs (loop4): Can't find a valid FAT filesystem [ 662.919785][T29998] binder: 29996:29998 got transaction with invalid data ptr 06:42:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1d88) [ 662.962165][T29998] binder: 29996:29998 transaction failed 29201/-14, size 8192-0 line 3180 [ 662.992209][T30001] binder: BINDER_SET_CONTEXT_MGR already set 06:42:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000604010002000270f7f8", 0x16}], 0x800019, 0x0) [ 663.007555][T30001] binder: 29999:30001 ioctl 40046207 0 returned -16 [ 663.012053][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 [ 663.110597][T30007] FAT-fs (loop4): bogus logical sector size 1536 [ 663.119090][T30007] FAT-fs (loop4): Can't find a valid FAT filesystem [ 663.213258][T30007] FAT-fs (loop4): bogus logical sector size 1536 [ 663.223558][T30007] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:48 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1da0) 06:42:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000704010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 663.784077][T30023] FAT-fs (loop4): bogus logical sector size 1792 [ 663.805358][T30023] FAT-fs (loop4): Can't find a valid FAT filesystem [ 663.880142][T30023] FAT-fs (loop4): bogus logical sector size 1792 [ 663.889847][T30023] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1db8) 06:42:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000a04010002000270f7f8", 0x16}], 0x800019, 0x0) [ 664.084948][T30042] FAT-fs (loop4): bogus logical sector size 2560 [ 664.098751][T30042] FAT-fs (loop4): Can't find a valid FAT filesystem [ 664.160195][T30042] FAT-fs (loop4): bogus logical sector size 2560 [ 664.167552][T30042] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:49 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1dd0) 06:42:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000f04010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 664.736611][T30059] binder: BINDER_SET_CONTEXT_MGR already set [ 664.760942][T30059] binder: 30053:30059 ioctl 40046207 0 returned -16 [ 664.765670][T30057] FAT-fs (loop4): bogus logical sector size 3840 06:42:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 664.789431][T30057] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 664.859306][T30057] FAT-fs (loop4): bogus logical sector size 3840 [ 664.869438][T30057] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1de8) [ 664.923184][T30072] binder_alloc: 30070: binder_alloc_buf, no vma [ 665.026553][T30077] binder_transaction: 7 callbacks suppressed [ 665.026563][T30077] binder: 30076:30077 got transaction with invalid data ptr [ 665.053579][T30077] binder_transaction: 10 callbacks suppressed [ 665.053598][T30077] binder: 30076:30077 transaction failed 29201/-14, size 8192-0 line 3180 [ 665.088970][ T2945] binder_release_work: 10 callbacks suppressed [ 665.088978][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:50 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174001004010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e00) 06:42:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 665.793272][T30091] binder: 30084:30091 got transaction with invalid data ptr [ 665.810535][T30091] binder: 30084:30091 transaction failed 29201/-14, size 8192-0 line 3180 [ 665.820776][T30092] binder: BINDER_SET_CONTEXT_MGR already set 06:42:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174001404010002000270f7f8", 0x16}], 0x800019, 0x0) [ 665.860864][T30092] binder: 30086:30092 ioctl 40046207 0 returned -16 [ 665.874318][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 665.901022][T30092] binder: 30086:30092 got transaction with invalid data ptr 06:42:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 665.908405][T30092] binder: 30086:30092 transaction failed 29201/-14, size 8192-0 line 3180 06:42:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 665.957649][ T2945] binder: undelivered TRANSACTION_ERROR: 29201 06:42:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e18) [ 666.043782][T30103] binder: 30102:30103 got transaction with invalid data ptr [ 666.051260][T30103] binder: 30102:30103 transaction failed 29201/-14, size 8192-0 line 3180 [ 666.093560][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 666.122615][T30106] FAT-fs (loop4): bogus logical sector size 5120 [ 666.140949][T30106] FAT-fs (loop4): Can't find a valid FAT filesystem [ 666.160053][T30111] binder_alloc: 30108: binder_alloc_buf, no vma [ 666.188137][T30111] binder: 30108:30111 transaction failed 29189/-3, size 8192-0 line 3148 [ 666.216097][T30106] FAT-fs (loop4): bogus logical sector size 5120 [ 666.225917][T26239] binder: undelivered TRANSACTION_ERROR: 29189 [ 666.234622][T30106] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:51 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174002804010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e30) [ 666.776760][T30123] binder: 30118:30123 got transaction with invalid data ptr [ 666.785839][T30124] binder: BINDER_SET_CONTEXT_MGR already set 06:42:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 666.820878][T30124] binder: 30120:30124 ioctl 40046207 0 returned -16 [ 666.827753][T30123] binder: 30118:30123 transaction failed 29201/-14, size 8192-0 line 3180 [ 666.834750][T30128] FAT-fs (loop4): bogus logical sector size 10240 [ 666.859231][T30128] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 666.865131][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 666.866432][T30132] binder: 30120:30132 got transaction with invalid data ptr [ 666.893556][T30132] binder: 30120:30132 transaction failed 29201/-14, size 8192-0 line 3180 [ 666.952886][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 666.976238][T30128] FAT-fs (loop4): bogus logical sector size 10240 06:42:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e48) [ 666.997380][T30128] FAT-fs (loop4): Can't find a valid FAT filesystem [ 667.013915][T30139] binder: 30137:30139 got transaction with invalid data ptr 06:42:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 667.060956][T30139] binder: 30137:30139 transaction failed 29201/-14, size 8192-0 line 3180 [ 667.075089][T26239] binder: undelivered TRANSACTION_ERROR: 29201 [ 667.119602][T30142] binder_alloc: 30140: binder_alloc_buf, no vma [ 667.151032][T30142] binder: 30140:30142 transaction failed 29189/-3, size 8192-0 line 3148 [ 667.187090][T26239] binder: undelivered TRANSACTION_ERROR: 29189 [ 667.238956][T30148] binder: 30146:30148 got transaction with invalid data ptr [ 667.247026][T30148] binder: 30146:30148 transaction failed 29201/-14, size 8192-0 line 3180 [ 667.258309][T26239] binder: undelivered TRANSACTION_ERROR: 29201 06:42:52 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174006f04010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e60) 06:42:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 667.812740][T30162] binder: 30155:30162 got transaction with invalid data ptr [ 667.815508][T30159] FAT-fs (loop4): bogus logical sector size 28416 [ 667.849719][T30165] binder: BINDER_SET_CONTEXT_MGR already set [ 667.856098][T30159] FAT-fs (loop4): Can't find a valid FAT filesystem [ 667.880214][T30165] binder: 30157:30165 ioctl 40046207 0 returned -16 [ 667.905592][T30168] binder: 30157:30168 got transaction with invalid data ptr 06:42:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 667.926305][T30159] FAT-fs (loop4): bogus logical sector size 28416 [ 667.944863][T30159] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e78) 06:42:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174007004010002000270f7f8", 0x16}], 0x800019, 0x0) [ 668.085836][T30178] binder: BINDER_SET_CONTEXT_MGR already set [ 668.107201][T30178] binder: 30174:30178 ioctl 40046207 0 returned -16 [ 668.353176][T30184] FAT-fs (loop4): bogus logical sector size 28672 [ 668.359727][T30184] FAT-fs (loop4): Can't find a valid FAT filesystem [ 668.422932][T30184] FAT-fs (loop4): bogus logical sector size 28672 [ 668.429882][T30184] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:53 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1e90) 06:42:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400b404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 668.879131][T30202] binder_alloc: 30194: binder_alloc_buf, no vma [ 668.881036][T30195] FAT-fs (loop4): bogus logical sector size 46080 [ 668.886567][T30200] binder: BINDER_SET_CONTEXT_MGR already set [ 668.909614][T30195] FAT-fs (loop4): Can't find a valid FAT filesystem [ 668.917903][T30200] binder: 30190:30200 ioctl 40046207 0 returned -16 06:42:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 668.980636][T30195] FAT-fs (loop4): bogus logical sector size 46080 [ 668.991144][T30195] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000202010002000270f7f8", 0x16}], 0x800019, 0x0) [ 669.126383][T30214] binder_alloc: 30212: binder_alloc_buf, no vma 06:42:54 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1ea8) 06:42:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000203010002000270f7f8", 0x16}], 0x800019, 0x0) [ 669.873527][T30232] binder_alloc: 30228: binder_alloc_buf, no vma [ 669.901855][T30230] FAT-fs (loop4): bogus sectors per cluster 3 [ 669.916568][T30231] binder_alloc: 30228: binder_alloc_buf, no vma 06:42:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:54 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 669.934939][T30230] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 669.991653][T30230] FAT-fs (loop4): bogus sectors per cluster 3 [ 670.002518][T30230] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:54 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000205010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1ec0) [ 670.155205][T30247] binder_alloc: 30246: binder_alloc_buf, no vma [ 670.180946][T30247] binder_transaction: 11 callbacks suppressed [ 670.180965][T30247] binder: 30246:30247 transaction failed 29189/-3, size 8192-0 line 3148 [ 670.203134][T30251] FAT-fs (loop4): bogus sectors per cluster 5 [ 670.211969][T30251] FAT-fs (loop4): Can't find a valid FAT filesystem [ 670.221280][ T2945] binder_release_work: 11 callbacks suppressed [ 670.221287][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 [ 670.272210][T30251] FAT-fs (loop4): bogus sectors per cluster 5 [ 670.278539][T30251] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:55 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:55 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000206010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1ed8) 06:42:55 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 670.940082][T30271] binder_alloc: 30263: binder_alloc_buf, no vma [ 670.957208][T30268] FAT-fs (loop4): bogus sectors per cluster 6 [ 670.975525][T30271] binder: 30263:30271 transaction failed 29189/-3, size 8192-0 line 3148 06:42:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 670.985318][T30268] FAT-fs (loop4): Can't find a valid FAT filesystem [ 671.006731][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:42:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1ef0) [ 671.054573][T30268] FAT-fs (loop4): bogus sectors per cluster 6 [ 671.082293][T30268] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:55 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 671.216048][T30285] binder_alloc: 30282: binder_alloc_buf, no vma [ 671.234319][T30285] binder: 30282:30285 transaction failed 29189/-3, size 8192-0 line 3148 [ 671.268385][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:42:56 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000207010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:56 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f08) 06:42:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 671.925889][T30299] binder_alloc: 30296: binder_alloc_buf, no vma [ 671.940264][T30298] FAT-fs (loop4): bogus sectors per cluster 7 [ 671.950757][T30299] binder: 30296:30299 transaction failed 29189/-3, size 8192-0 line 3148 06:42:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 671.970935][T30298] FAT-fs (loop4): Can't find a valid FAT filesystem [ 671.986410][T26239] binder: undelivered TRANSACTION_ERROR: 29189 [ 672.012167][T30298] FAT-fs (loop4): bogus sectors per cluster 7 [ 672.018368][T30298] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 672.033937][T30311] binder_alloc: 30306: binder_alloc_buf, no vma [ 672.049116][T30311] binder: 30306:30311 transaction failed 29189/-3, size 8192-0 line 3148 06:42:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000209010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f20) [ 672.104600][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:42:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 672.158826][T30315] binder: 30314:30315 transaction failed 29189/-22, size 8192-0 line 2995 [ 672.210959][T26239] binder: undelivered TRANSACTION_ERROR: 29189 [ 672.218437][T30319] FAT-fs (loop4): bogus sectors per cluster 9 [ 672.228070][T30319] FAT-fs (loop4): Can't find a valid FAT filesystem [ 672.288007][T30319] FAT-fs (loop4): bogus sectors per cluster 9 [ 672.300475][T30319] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:57 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020a010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f38) [ 672.923728][T30335] binder_alloc: 30330: binder_alloc_buf, no vma [ 672.930059][T30335] binder: 30330:30335 transaction failed 29189/-3, size 8192-0 line 3148 06:42:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 672.977342][T30340] binder_alloc: 30330: binder_alloc_buf, no vma [ 672.981499][T30334] FAT-fs (loop4): bogus sectors per cluster 10 [ 672.989865][T30334] FAT-fs (loop4): Can't find a valid FAT filesystem [ 672.999183][T30340] binder: 30333:30340 transaction failed 29189/-3, size 8192-0 line 3148 [ 673.002763][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:42:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 673.032764][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:42:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 673.073928][T30334] FAT-fs (loop4): bogus sectors per cluster 10 [ 673.100968][T30334] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f50) 06:42:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020f010002000270f7f8", 0x16}], 0x800019, 0x0) [ 673.211026][T30351] binder_alloc: 30347: binder_alloc_buf, no vma [ 673.242232][T30351] binder: 30347:30351 transaction failed 29189/-3, size 8192-0 line 3148 [ 673.247703][T30353] binder_alloc: 30347: binder_alloc_buf, no vma [ 673.265107][T30353] binder: 30349:30353 transaction failed 29189/-3, size 8192-0 line 3148 [ 673.279568][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 [ 673.308326][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 [ 673.423510][T30359] FAT-fs (loop4): bogus sectors per cluster 15 [ 673.429718][T30359] FAT-fs (loop4): Can't find a valid FAT filesystem [ 673.476914][T30359] FAT-fs (loop4): bogus sectors per cluster 15 [ 673.485975][T30359] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:58 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x797290fd47000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:58 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f68) 06:42:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000210010002000270f7f8", 0x16}], 0x800019, 0x0) [ 673.923364][T30368] binder_alloc: 30366: binder_alloc_buf, no vma 06:42:58 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000214010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f80) [ 674.115960][T30387] FAT-fs (loop4): bogus sectors per cluster 20 [ 674.135525][T30391] binder: BINDER_SET_CONTEXT_MGR already set [ 674.144091][T30387] FAT-fs (loop4): Can't find a valid FAT filesystem [ 674.165320][T30391] binder: 30390:30391 ioctl 40046207 0 returned -16 [ 674.227199][T30387] FAT-fs (loop4): bogus sectors per cluster 20 [ 674.238713][T30387] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:59 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:42:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000263010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:59 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:42:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1f98) [ 674.905731][T30406] binder: BINDER_SET_CONTEXT_MGR already set [ 674.905751][T30406] binder: 30404:30406 ioctl 40046207 0 returned -16 [ 674.941512][T30406] binder_alloc: 30400: binder_alloc_buf failed to map pages in userspace, no vma 06:42:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:42:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:42:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 674.956474][T30409] FAT-fs (loop4): bogus sectors per cluster 99 [ 674.956487][T30409] FAT-fs (loop4): Can't find a valid FAT filesystem 06:42:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 675.022585][T30409] FAT-fs (loop4): bogus sectors per cluster 99 [ 675.028786][T30409] FAT-fs (loop4): Can't find a valid FAT filesystem [ 675.056064][T30421] binder: 30414:30421 ioctl c0306201 0 returned -14 06:42:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400026f010002000270f7f8", 0x16}], 0x800019, 0x0) 06:42:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1fb0) 06:42:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:42:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 675.157721][T30424] FAT-fs (loop4): bogus sectors per cluster 111 [ 675.187703][T30428] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 675.187714][T30428] binder_alloc: 30426: binder_alloc_buf, no vma [ 675.212716][T30424] FAT-fs (loop4): Can't find a valid FAT filesystem [ 675.240399][T30432] binder: BINDER_SET_CONTEXT_MGR already set [ 675.245130][T30428] binder_transaction: 5 callbacks suppressed [ 675.245148][T30428] binder: 30426:30428 transaction failed 29189/-3, size 8192-0 line 3148 06:42:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 675.267923][T30432] binder: 30431:30432 ioctl 40046207 0 returned -16 [ 675.284043][T30424] FAT-fs (loop4): bogus sectors per cluster 111 [ 675.289712][T30436] binder: 30431:30436 ioctl c0306201 0 returned -14 [ 675.292741][T30424] FAT-fs (loop4): Can't find a valid FAT filesystem [ 675.326175][ T2945] binder_release_work: 5 callbacks suppressed [ 675.326184][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:42:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000270010002000270f7f8", 0x16}], 0x800019, 0x0) [ 675.469451][T30442] FAT-fs (loop4): bogus sectors per cluster 112 [ 675.476824][T30442] FAT-fs (loop4): Can't find a valid FAT filesystem [ 675.539544][T30442] FAT-fs (loop4): bogus sectors per cluster 112 [ 675.549782][T30442] FAT-fs (loop4): Can't find a valid FAT filesystem 06:43:00 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:43:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1fc8) 06:43:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002b4010002000270f7f8", 0x16}], 0x800019, 0x0) [ 675.865653][T30452] binder_alloc: 30450: binder_alloc_buf, no vma [ 675.879614][T30457] FAT-fs (loop4): bogus sectors per cluster 180 [ 675.883551][T30454] binder: BINDER_SET_CONTEXT_MGR already set [ 675.899062][T30452] binder: 30450:30452 transaction failed 29189/-3, size 8192-0 line 3148 06:43:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 675.910354][T30454] binder: 30451:30454 ioctl 40046207 0 returned -16 [ 675.912654][T30457] FAT-fs (loop4): Can't find a valid FAT filesystem [ 675.944253][T30462] binder: 30451:30462 ioctl c0306201 0 returned -14 [ 675.951770][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:43:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 676.030978][T30457] FAT-fs (loop4): bogus sectors per cluster 180 [ 676.042958][T30457] FAT-fs (loop4): Can't find a valid FAT filesystem 06:43:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1fe0) 06:43:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204020002000270f7f8", 0x16}], 0x800019, 0x0) [ 676.113012][T30471] binder: BINDER_SET_CONTEXT_MGR already set [ 676.156060][T30471] binder: 30470:30471 ioctl 40046207 0 returned -16 [ 676.183530][T30477] binder: 30470:30477 transaction failed 29189/-22, size 8192-0 line 2995 [ 676.231680][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:43:01 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204030002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x1ff8) 06:43:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204040002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 676.858904][T30495] binder: BINDER_SET_CONTEXT_MGR already set [ 676.888842][T30495] binder: 30490:30495 ioctl 40046207 0 returned -16 06:43:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 676.941065][T30500] binder: 30490:30500 transaction failed 29189/-22, size 8192-0 line 2995 [ 676.951878][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:43:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2010) 06:43:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) [ 677.103568][T30511] binder: BINDER_SET_CONTEXT_MGR already set [ 677.116394][T30511] binder: 30508:30511 ioctl 40046207 0 returned -16 [ 677.155536][T30511] binder: 30508:30511 transaction failed 29189/-22, size 8192-0 line 2995 [ 677.181310][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:43:02 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204050002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:43:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2028) 06:43:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204060002000270f7f8", 0x16}], 0x800019, 0x0) [ 677.826318][T30526] binder: BINDER_SET_CONTEXT_MGR already set [ 677.853654][T30526] binder: 30525:30526 ioctl 40046207 0 returned -16 [ 677.862561][T30526] binder_alloc: 30521: binder_alloc_buf failed to map pages in userspace, no vma 06:43:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:43:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 677.902335][T30526] binder: 30525:30526 transaction failed 29189/-3, size 8192-0 line 3148 [ 677.922999][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:43:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2040) [ 678.024047][T30541] binder_alloc: 30536: binder_alloc_buf, no vma [ 678.048604][T30543] binder: BINDER_SET_CONTEXT_MGR already set [ 678.056775][T30541] binder: 30536:30541 transaction failed 29189/-3, size 8192-0 line 3148 06:43:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 678.070412][T30543] binder: 30538:30543 ioctl 40046207 0 returned -16 [ 678.125835][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:43:03 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204070002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2058) [ 678.832161][T30560] binder_alloc: 30558: binder_alloc_buf, no vma [ 678.868311][T30559] binder_alloc: 30558: binder_alloc_buf, no vma 06:43:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002040a0002000270f7f8", 0x16}], 0x800019, 0x0) [ 678.878239][T30560] binder: 30558:30560 transaction failed 29189/-3, size 8192-0 line 3148 [ 678.906000][T30559] binder: 30554:30559 transaction failed 29189/-3, size 8192-0 line 3148 [ 678.934328][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 [ 678.947802][ T2945] binder: undelivered TRANSACTION_ERROR: 29189 06:43:03 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2070) 06:43:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 679.101517][T30577] binder_alloc: 30574: binder_alloc_buf, no vma [ 679.128816][T30577] binder: 30574:30577 transaction failed 29189/-3, size 8192-0 line 3148 [ 679.144038][ T8190] binder: undelivered TRANSACTION_ERROR: 29189 06:43:04 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002040f0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2088) 06:43:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 679.804563][T30589] binder_alloc: 30587: binder_alloc_buf, no vma 06:43:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204100002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x20a0) 06:43:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 679.996030][T30604] binder_alloc: 30603: binder_alloc_buf, no vma [ 680.084785][T30612] binder_alloc: 30608: binder_alloc_buf, no vma [ 680.129577][T30616] binder_alloc: 30611: binder_alloc_buf, no vma 06:43:05 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204140002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x20b8) 06:43:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) [ 680.797839][T30629] binder_alloc: 30625: binder_alloc_buf, no vma [ 680.821551][T30629] binder_transaction: 4 callbacks suppressed [ 680.821569][T30629] binder: 30625:30629 transaction failed 29189/-3, size 8192-0 line 3148 06:43:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204280002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 680.874550][ T5] binder_release_work: 4 callbacks suppressed [ 680.874558][ T5] binder: undelivered TRANSACTION_ERROR: 29189 06:43:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x20d0) [ 680.981516][T30641] binder: 30640:30641 transaction failed 29189/-22, size 8192-0 line 2995 [ 680.994481][ T5] binder: undelivered TRANSACTION_ERROR: 29189 06:43:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:06 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204500002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x20e8) 06:43:06 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204510002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 681.821820][T30667] binder: 30658:30667 transaction failed 29189/-22, size 8192-0 line 2995 [ 681.850522][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:43:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 681.965605][T30674] binder: 30673:30674 transaction failed 29189/-22, size 8192-0 line 2995 [ 681.977147][T26239] binder: undelivered TRANSACTION_ERROR: 29189 06:43:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2100) 06:43:06 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 682.122670][T30681] FAT-fs (loop4): Directory bread(block 112) failed 06:43:07 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:07 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:07 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 06:43:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204520002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2118) 06:43:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:07 executing program 0: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 682.880693][T30703] FAT-fs (loop4): Directory bread(block 112) failed [ 682.919192][T30703] FAT-fs (loop4): Directory bread(block 113) failed 06:43:07 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204530002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2130) [ 683.245308][T30722] FAT-fs (loop4): Directory bread(block 112) failed [ 683.261027][T30722] FAT-fs (loop4): Directory bread(block 113) failed [ 683.279211][T30722] FAT-fs (loop4): Directory bread(block 114) failed 06:43:08 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:43:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204540002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2148) [ 683.855618][T30738] binder: 30730:30738 ioctl c0306201 0 returned -14 [ 683.876856][T30735] FAT-fs (loop4): Directory bread(block 112) failed 06:43:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 683.909543][T30735] FAT-fs (loop4): Directory bread(block 113) failed 06:43:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:43:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) [ 683.953937][T30735] FAT-fs (loop4): Directory bread(block 114) failed [ 683.974107][T30735] FAT-fs (loop4): Directory bread(block 115) failed 06:43:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2160) 06:43:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204550002000270f7f8", 0x16}], 0x800019, 0x0) [ 684.047543][T30750] binder: 30749:30750 ioctl c0306201 0 returned -14 [ 684.209837][T30759] FAT-fs (loop4): Directory bread(block 112) failed [ 684.216641][T30759] FAT-fs (loop4): Directory bread(block 113) failed [ 684.223739][T30759] FAT-fs (loop4): Directory bread(block 114) failed [ 684.230488][T30759] FAT-fs (loop4): Directory bread(block 115) failed [ 684.237698][T30759] FAT-fs (loop4): Directory bread(block 116) failed 06:43:09 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:43:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204560002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2178) [ 684.813846][T30770] binder: 30766:30770 ioctl c0306201 0 returned -14 06:43:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 684.949087][T30777] FAT-fs (loop4): Directory bread(block 112) failed [ 684.979702][T30777] FAT-fs (loop4): Directory bread(block 113) failed [ 684.997918][T30777] FAT-fs (loop4): Directory bread(block 114) failed [ 685.016266][T30777] FAT-fs (loop4): Directory bread(block 115) failed [ 685.030051][T30777] FAT-fs (loop4): Directory bread(block 116) failed 06:43:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2190) 06:43:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 685.049358][T30777] FAT-fs (loop4): Directory bread(block 117) failed [ 685.141215][T30789] FAT-fs (loop3): bogus number of reserved sectors [ 685.159568][T30789] FAT-fs (loop3): Can't find a valid FAT filesystem 06:43:10 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204570002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x21a8) 06:43:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) [ 685.888353][T30806] FAT-fs (loop4): Directory bread(block 112) failed [ 685.914451][T30810] FAT-fs (loop3): bogus number of reserved sectors [ 685.921365][T30806] FAT-fs (loop4): Directory bread(block 113) failed [ 685.929260][T30810] FAT-fs (loop3): Can't find a valid FAT filesystem 06:43:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 685.936654][T30806] FAT-fs (loop4): Directory bread(block 114) failed [ 685.944482][T30806] FAT-fs (loop4): Directory bread(block 115) failed [ 685.951846][T30806] FAT-fs (loop4): Directory bread(block 116) failed [ 685.963639][T30806] FAT-fs (loop4): Directory bread(block 117) failed [ 685.971194][T30806] FAT-fs (loop4): Directory bread(block 118) failed 06:43:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:43:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204580002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x21c0) [ 686.143517][T30823] FAT-fs (loop3): bogus number of reserved sectors [ 686.163953][T30823] FAT-fs (loop3): Can't find a valid FAT filesystem [ 686.279625][T30829] FAT-fs (loop4): Directory bread(block 112) failed [ 686.297303][T30829] FAT-fs (loop4): Directory bread(block 113) failed [ 686.304334][T30829] FAT-fs (loop4): Directory bread(block 114) failed [ 686.317160][T30829] FAT-fs (loop4): Directory bread(block 115) failed [ 686.329195][T30829] FAT-fs (loop4): Directory bread(block 116) failed [ 686.342782][T30829] FAT-fs (loop4): Directory bread(block 117) failed [ 686.349676][T30829] FAT-fs (loop4): Directory bread(block 118) failed [ 686.360556][T30829] FAT-fs (loop4): Directory bread(block 119) failed 06:43:11 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:43:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x800019, 0x0) 06:43:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x21d8) 06:43:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204590002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 686.870088][T30843] FAT-fs (loop4): Directory bread(block 112) failed [ 686.886979][T30843] FAT-fs (loop4): Directory bread(block 113) failed 06:43:11 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 686.912227][T30843] FAT-fs (loop4): Directory bread(block 114) failed [ 686.925967][T30845] FAT-fs (loop3): bogus number of reserved sectors [ 686.938537][T30843] FAT-fs (loop4): Directory bread(block 115) failed [ 686.945068][T30845] FAT-fs (loop3): Can't find a valid FAT filesystem [ 686.974081][T30843] FAT-fs (loop4): Directory bread(block 116) failed [ 686.991996][T30843] FAT-fs (loop4): Directory bread(block 117) failed [ 686.998859][T30843] FAT-fs (loop4): Directory bread(block 118) failed [ 687.012928][T30843] FAT-fs (loop4): Directory bread(block 119) failed 06:43:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x21f0) [ 687.019893][T30843] FAT-fs (loop4): Directory bread(block 120) failed 06:43:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x800019, 0x0) 06:43:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002045a0002000270f7f8", 0x16}], 0x800019, 0x0) [ 687.195633][T30860] FAT-fs (loop3): bogus number of reserved sectors [ 687.203088][T30860] FAT-fs (loop3): Can't find a valid FAT filesystem [ 687.295667][T30867] FAT-fs (loop4): Directory bread(block 112) failed [ 687.302751][T30867] FAT-fs (loop4): Directory bread(block 113) failed [ 687.309735][T30867] FAT-fs (loop4): Directory bread(block 114) failed [ 687.325441][T30867] FAT-fs (loop4): Directory bread(block 115) failed [ 687.341945][T30867] FAT-fs (loop4): Directory bread(block 116) failed [ 687.349671][T30867] FAT-fs (loop4): Directory bread(block 117) failed [ 687.363559][T30867] FAT-fs (loop4): Directory bread(block 118) failed [ 687.370443][T30867] FAT-fs (loop4): Directory bread(block 119) failed [ 687.377734][T30867] FAT-fs (loop4): Directory bread(block 120) failed [ 687.384920][T30867] FAT-fs (loop4): Directory bread(block 121) failed 06:43:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, 0x0, 0x800019, 0x0) 06:43:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2208) 06:43:12 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002045b0002000270f7f8", 0x16}], 0x800019, 0x0) [ 687.839927][T30875] FAT-fs (loop3): bogus number of reserved sectors [ 687.859685][T30875] FAT-fs (loop3): Can't find a valid FAT filesystem [ 687.872157][T30876] FAT-fs (loop4): Directory bread(block 112) failed 06:43:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 687.889199][T30876] FAT-fs (loop4): Directory bread(block 113) failed [ 687.900912][T30876] FAT-fs (loop4): Directory bread(block 114) failed [ 687.916128][T30876] FAT-fs (loop4): Directory bread(block 115) failed 06:43:12 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r2 = inotify_add_watch(r1, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r1, r2) [ 687.935606][T30876] FAT-fs (loop4): Directory bread(block 116) failed [ 687.952733][T30876] FAT-fs (loop4): Directory bread(block 117) failed 06:43:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f00000003c0), 0x800019, 0x0) [ 687.983099][T30876] FAT-fs (loop4): Directory bread(block 118) failed [ 688.000078][T30876] FAT-fs (loop4): Directory bread(block 119) failed [ 688.016331][T30876] FAT-fs (loop4): Directory bread(block 120) failed 06:43:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2220) 06:43:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 688.042022][T30876] FAT-fs (loop4): Directory bread(block 121) failed 06:43:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002045c0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:12 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 688.182492][T30893] FAT-fs (loop3): bogus number of reserved sectors [ 688.206376][T30893] FAT-fs (loop3): Can't find a valid FAT filesystem 06:43:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f00000003c0), 0x800019, 0x0) [ 688.290695][T30900] FAT-fs (loop4): Directory bread(block 112) failed [ 688.297948][T30900] FAT-fs (loop4): Directory bread(block 113) failed 06:43:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2238) [ 688.336293][T30900] FAT-fs (loop4): Directory bread(block 114) failed [ 688.360332][T30900] FAT-fs (loop4): Directory bread(block 115) failed [ 688.377732][T30900] FAT-fs (loop4): Directory bread(block 116) failed [ 688.391743][T30900] FAT-fs (loop4): Directory bread(block 117) failed [ 688.403703][T30900] FAT-fs (loop4): Directory bread(block 118) failed [ 688.418828][T30900] FAT-fs (loop4): Directory bread(block 119) failed [ 688.426218][T30909] FAT-fs (loop3): bogus number of reserved sectors [ 688.433087][T30900] FAT-fs (loop4): Directory bread(block 120) failed [ 688.439919][T30909] FAT-fs (loop3): Can't find a valid FAT filesystem [ 688.447253][T30900] FAT-fs (loop4): Directory bread(block 121) failed 06:43:13 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002045d0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f00000003c0), 0x800019, 0x0) 06:43:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2250) 06:43:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 688.908949][T30920] FAT-fs (loop3): bogus number of reserved sectors [ 688.925807][T30918] FAT-fs (loop4): Directory bread(block 112) failed [ 688.939396][T30920] FAT-fs (loop3): Can't find a valid FAT filesystem [ 688.951307][T30918] FAT-fs (loop4): Directory bread(block 113) failed [ 688.973565][T30918] FAT-fs (loop4): Directory bread(block 114) failed [ 688.989110][T30918] FAT-fs (loop4): Directory bread(block 115) failed [ 688.996807][T30918] FAT-fs (loop4): Directory bread(block 116) failed [ 689.012130][T30918] FAT-fs (loop4): Directory bread(block 117) failed 06:43:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{0x0}], 0x800019, 0x0) [ 689.019148][T30918] FAT-fs (loop4): Directory bread(block 118) failed [ 689.034309][T30918] FAT-fs (loop4): Directory bread(block 119) failed [ 689.051067][T30918] FAT-fs (loop4): Directory bread(block 120) failed [ 689.057736][T30918] FAT-fs (loop4): Directory bread(block 121) failed 06:43:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2268) 06:43:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r5 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r4, r5) dup3(r3, r4, 0x0) 06:43:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002045e0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 689.209005][T30934] FAT-fs (loop3): bogus number of reserved sectors [ 689.235377][T30934] FAT-fs (loop3): Can't find a valid FAT filesystem [ 689.346813][T30941] FAT-fs (loop4): Directory bread(block 112) failed [ 689.390733][T30941] FAT-fs (loop4): Directory bread(block 113) failed [ 689.401291][T30941] FAT-fs (loop4): Directory bread(block 114) failed [ 689.424587][T30941] FAT-fs (loop4): Directory bread(block 115) failed [ 689.431972][T30941] FAT-fs (loop4): Directory bread(block 116) failed [ 689.438763][T30941] FAT-fs (loop4): Directory bread(block 117) failed [ 689.446102][T30941] FAT-fs (loop4): Directory bread(block 118) failed [ 689.454857][T30941] FAT-fs (loop4): Directory bread(block 119) failed [ 689.462144][T30941] FAT-fs (loop4): Directory bread(block 120) failed [ 689.468932][T30941] FAT-fs (loop4): Directory bread(block 121) failed 06:43:14 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2280) 06:43:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{0x0}], 0x800019, 0x0) 06:43:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r5 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r4, r5) dup3(r3, r4, 0x0) 06:43:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002045f0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 689.906976][T30956] FAT-fs (loop4): Directory bread(block 112) failed [ 689.918894][T30961] FAT-fs (loop3): bogus number of reserved sectors [ 689.934657][T30956] FAT-fs (loop4): Directory bread(block 113) failed [ 689.956333][T30956] FAT-fs (loop4): Directory bread(block 114) failed [ 689.965983][T30961] FAT-fs (loop3): Can't find a valid FAT filesystem [ 689.977905][T30956] FAT-fs (loop4): Directory bread(block 115) failed [ 689.991988][T30956] FAT-fs (loop4): Directory bread(block 116) failed [ 689.998793][T30956] FAT-fs (loop4): Directory bread(block 117) failed [ 690.005749][T30956] FAT-fs (loop4): Directory bread(block 118) failed [ 690.013423][T30956] FAT-fs (loop4): Directory bread(block 119) failed [ 690.020717][T30956] FAT-fs (loop4): Directory bread(block 120) failed [ 690.027876][T30956] FAT-fs (loop4): Directory bread(block 121) failed 06:43:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{0x0}], 0x800019, 0x0) 06:43:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r5 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r4, r5) dup3(r3, r4, 0x0) 06:43:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2298) 06:43:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204600002000270f7f8", 0x16}], 0x800019, 0x0) [ 690.210042][T30973] FAT-fs (loop3): bogus number of reserved sectors [ 690.238879][T30973] FAT-fs (loop3): Can't find a valid FAT filesystem [ 690.318761][T30981] FAT-fs (loop4): Directory bread(block 112) failed [ 690.348906][T30981] FAT-fs (loop4): Directory bread(block 113) failed [ 690.387257][T30981] FAT-fs (loop4): Directory bread(block 114) failed [ 690.397286][T30981] FAT-fs (loop4): Directory bread(block 115) failed [ 690.410044][T30981] FAT-fs (loop4): Directory bread(block 116) failed [ 690.419256][T30981] FAT-fs (loop4): Directory bread(block 117) failed [ 690.429980][T30981] FAT-fs (loop4): Directory bread(block 118) failed [ 690.438832][T30981] FAT-fs (loop4): Directory bread(block 119) failed [ 690.449897][T30981] FAT-fs (loop4): Directory bread(block 120) failed [ 690.458845][T30981] FAT-fs (loop4): Directory bread(block 121) failed 06:43:15 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r5 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r4, r5) dup3(r3, r4, 0x0) 06:43:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x22b0) 06:43:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x800019, 0x0) 06:43:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204610002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 690.895676][T30995] FAT-fs (loop3): bogus number of reserved sectors [ 690.903598][T30991] FAT-fs (loop4): Directory bread(block 112) failed [ 690.924591][T30991] FAT-fs (loop4): Directory bread(block 113) failed [ 690.933721][T30995] FAT-fs (loop3): Can't find a valid FAT filesystem [ 690.944726][T30991] FAT-fs (loop4): Directory bread(block 114) failed [ 690.954413][T30991] FAT-fs (loop4): Directory bread(block 115) failed [ 690.966292][T30991] FAT-fs (loop4): Directory bread(block 116) failed [ 690.975715][T30991] FAT-fs (loop4): Directory bread(block 117) failed [ 690.987810][T30991] FAT-fs (loop4): Directory bread(block 118) failed 06:43:15 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x800019, 0x0) 06:43:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 690.997046][T30991] FAT-fs (loop4): Directory bread(block 119) failed [ 691.009071][T30991] FAT-fs (loop4): Directory bread(block 120) failed [ 691.036916][T30991] FAT-fs (loop4): Directory bread(block 121) failed 06:43:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r4 = inotify_add_watch(r3, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r3, r4) 06:43:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x22c8) 06:43:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204620002000270f7f8", 0x16}], 0x800019, 0x0) [ 691.212497][T31008] FAT-fs (loop3): bogus number of reserved sectors [ 691.234070][T31008] FAT-fs (loop3): Can't find a valid FAT filesystem [ 691.332423][T31017] FAT-fs (loop4): Directory bread(block 112) failed [ 691.339180][T31017] FAT-fs (loop4): Directory bread(block 113) failed [ 691.357255][T31017] FAT-fs (loop4): Directory bread(block 114) failed [ 691.364227][T31017] FAT-fs (loop4): Directory bread(block 115) failed [ 691.371214][T31017] FAT-fs (loop4): Directory bread(block 116) failed [ 691.378060][T31017] FAT-fs (loop4): Directory bread(block 117) failed [ 691.384910][T31017] FAT-fs (loop4): Directory bread(block 118) failed [ 691.391873][T31017] FAT-fs (loop4): Directory bread(block 119) failed [ 691.398669][T31017] FAT-fs (loop4): Directory bread(block 120) failed [ 691.405573][T31017] FAT-fs (loop4): Directory bread(block 121) failed 06:43:16 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0/bus\x00', 0x82) 06:43:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x800019, 0x0) 06:43:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x22e0) 06:43:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204630002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 691.889834][T31025] FAT-fs (loop4): Directory bread(block 112) failed [ 691.899366][T31029] FAT-fs (loop3): bogus number of reserved sectors [ 691.921033][T31029] FAT-fs (loop3): Can't find a valid FAT filesystem [ 691.931218][T31025] FAT-fs (loop4): Directory bread(block 113) failed 06:43:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174", 0xb}], 0x800019, 0x0) [ 691.961939][T31025] FAT-fs (loop4): Directory bread(block 114) failed [ 691.992047][T31025] FAT-fs (loop4): Directory bread(block 115) failed 06:43:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) [ 692.016666][T31025] FAT-fs (loop4): Directory bread(block 116) failed [ 692.055238][T31025] FAT-fs (loop4): Directory bread(block 117) failed 06:43:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x22f8) [ 692.100689][T31025] FAT-fs (loop4): Directory bread(block 118) failed [ 692.116643][T31041] FAT-fs (loop3): bogus number of reserved sectors [ 692.122234][T31025] FAT-fs (loop4): Directory bread(block 119) failed [ 692.150781][T31041] FAT-fs (loop3): Can't find a valid FAT filesystem [ 692.153338][T31025] FAT-fs (loop4): Directory bread(block 120) failed 06:43:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 692.195154][T31025] FAT-fs (loop4): Directory bread(block 121) failed 06:43:17 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) inotify_init() 06:43:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174", 0xb}], 0x800019, 0x0) 06:43:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204640002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2310) [ 692.844478][T31065] FAT-fs (loop3): bogus number of reserved sectors [ 692.847100][T31063] FAT-fs (loop4): Directory bread(block 112) failed [ 692.865256][T31065] FAT-fs (loop3): Can't find a valid FAT filesystem [ 692.867290][T31063] FAT-fs (loop4): Directory bread(block 113) failed 06:43:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 692.893545][T31063] FAT-fs (loop4): Directory bread(block 114) failed [ 692.906358][T31063] FAT-fs (loop4): Directory bread(block 115) failed [ 692.913289][T31063] FAT-fs (loop4): Directory bread(block 116) failed [ 692.920079][T31063] FAT-fs (loop4): Directory bread(block 117) failed [ 692.926922][T31063] FAT-fs (loop4): Directory bread(block 118) failed [ 692.933803][T31063] FAT-fs (loop4): Directory bread(block 119) failed 06:43:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) [ 692.940722][T31063] FAT-fs (loop4): Directory bread(block 120) failed [ 692.947736][T31063] FAT-fs (loop4): Directory bread(block 121) failed 06:43:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174", 0xb}], 0x800019, 0x0) 06:43:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2328) 06:43:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204650002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 693.136024][T31079] FAT-fs (loop3): bogus number of reserved sectors [ 693.179901][T31079] FAT-fs (loop3): Can't find a valid FAT filesystem [ 693.247874][T31083] FAT-fs (loop4): Directory bread(block 112) failed [ 693.267252][T31083] FAT-fs (loop4): Directory bread(block 113) failed [ 693.294511][T31083] FAT-fs (loop4): Directory bread(block 114) failed [ 693.313863][T31083] FAT-fs (loop4): Directory bread(block 115) failed [ 693.329661][T31083] FAT-fs (loop4): Directory bread(block 116) failed [ 693.338677][T31083] FAT-fs (loop4): Directory bread(block 117) failed [ 693.349925][T31083] FAT-fs (loop4): Directory bread(block 118) failed [ 693.359314][T31083] FAT-fs (loop4): Directory bread(block 119) failed [ 693.370398][T31083] FAT-fs (loop4): Directory bread(block 120) failed [ 693.379868][T31083] FAT-fs (loop4): Directory bread(block 121) failed 06:43:18 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2340) 06:43:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002", 0x11}], 0x800019, 0x0) 06:43:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204660002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) [ 693.798708][T31096] FAT-fs (loop3): invalid media value (0x00) [ 693.816392][T31096] FAT-fs (loop3): Can't find a valid FAT filesystem [ 693.828459][T31099] FAT-fs (loop4): Directory bread(block 112) failed 06:43:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002", 0x11}], 0x800019, 0x0) [ 693.863406][T31099] FAT-fs (loop4): Directory bread(block 113) failed [ 693.900644][T31099] FAT-fs (loop4): Directory bread(block 114) failed [ 693.934591][T31099] FAT-fs (loop4): Directory bread(block 115) failed 06:43:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) 06:43:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2358) [ 693.975346][T31099] FAT-fs (loop4): Directory bread(block 116) failed [ 694.000439][T31113] FAT-fs (loop3): invalid media value (0x00) [ 694.010946][T31099] FAT-fs (loop4): Directory bread(block 117) failed [ 694.027117][T31113] FAT-fs (loop3): Can't find a valid FAT filesystem [ 694.046564][T31099] FAT-fs (loop4): Directory bread(block 118) failed [ 694.080740][T31099] FAT-fs (loop4): Directory bread(block 119) failed [ 694.103867][T31099] FAT-fs (loop4): Directory bread(block 120) failed [ 694.120319][T31099] FAT-fs (loop4): Directory bread(block 121) failed 06:43:19 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14d}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) 06:43:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204670002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002", 0x11}], 0x800019, 0x0) 06:43:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2370) [ 694.774832][T31129] FAT-fs (loop3): invalid media value (0x00) [ 694.788997][T31129] FAT-fs (loop3): Can't find a valid FAT filesystem 06:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") close(0xffffffffffffffff) 06:43:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 694.824929][T31136] FAT-fs (loop4): Directory bread(block 112) failed [ 694.841046][T31136] FAT-fs (loop4): Directory bread(block 113) failed [ 694.864455][T31136] FAT-fs (loop4): Directory bread(block 114) failed 06:43:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270", 0x14}], 0x800019, 0x0) [ 694.891106][T31136] FAT-fs (loop4): Directory bread(block 115) failed [ 694.912926][T31136] FAT-fs (loop4): Directory bread(block 116) failed [ 694.931387][T31136] FAT-fs (loop4): Directory bread(block 117) failed 06:43:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") close(0xffffffffffffffff) 06:43:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2388) [ 694.947234][T31136] FAT-fs (loop4): Directory bread(block 118) failed [ 694.970954][T31136] FAT-fs (loop4): Directory bread(block 119) failed 06:43:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 695.013154][T31148] FAT-fs (loop3): invalid media value (0x00) [ 695.019404][T31136] FAT-fs (loop4): Directory bread(block 120) failed [ 695.037205][T31136] FAT-fs (loop4): Directory bread(block 121) failed [ 695.046341][T31148] FAT-fs (loop3): Can't find a valid FAT filesystem 06:43:20 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x29a}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") close(0xffffffffffffffff) 06:43:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270", 0x14}], 0x800019, 0x0) 06:43:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204680002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x23a0) 06:43:20 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 695.729125][T31169] FAT-fs (loop4): Directory bread(block 112) failed [ 695.744408][T31171] FAT-fs (loop3): invalid media value (0x00) [ 695.750948][T31169] FAT-fs (loop4): Directory bread(block 113) failed [ 695.763527][T31169] FAT-fs (loop4): Directory bread(block 114) failed 06:43:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 695.776031][T31171] FAT-fs (loop3): Can't find a valid FAT filesystem [ 695.783254][T31169] FAT-fs (loop4): Directory bread(block 115) failed [ 695.807505][T31169] FAT-fs (loop4): Directory bread(block 116) failed [ 695.830967][T31169] FAT-fs (loop4): Directory bread(block 117) failed [ 695.838066][T31169] FAT-fs (loop4): Directory bread(block 118) failed [ 695.852290][T31169] FAT-fs (loop4): Directory bread(block 119) failed [ 695.868120][T31169] FAT-fs (loop4): Directory bread(block 120) failed 06:43:20 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x23b8) [ 695.891049][T31169] FAT-fs (loop4): Directory bread(block 121) failed 06:43:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270", 0x14}], 0x800019, 0x0) 06:43:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 696.056942][T31190] FAT-fs (loop3): invalid media value (0x00) [ 696.067312][T31190] FAT-fs (loop3): Can't find a valid FAT filesystem 06:43:21 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204690002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:21 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7", 0x15}], 0x800019, 0x0) 06:43:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x23d0) 06:43:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 696.745008][T31206] FAT-fs (loop3): invalid media value (0x00) [ 696.759547][T31207] FAT-fs (loop4): Directory bread(block 112) failed [ 696.767778][T31206] FAT-fs (loop3): Can't find a valid FAT filesystem [ 696.801030][T31207] FAT-fs (loop4): Directory bread(block 113) failed [ 696.808363][T31207] FAT-fs (loop4): Directory bread(block 114) failed [ 696.825969][T31207] FAT-fs (loop4): Directory bread(block 115) failed 06:43:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7", 0x15}], 0x800019, 0x0) 06:43:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 696.866759][T31207] FAT-fs (loop4): Directory bread(block 116) failed [ 696.880953][T31207] FAT-fs (loop4): Directory bread(block 117) failed 06:43:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x23e8) 06:43:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 696.931940][T31207] FAT-fs (loop4): Directory bread(block 118) failed [ 696.947555][T31218] FAT-fs (loop3): invalid media value (0x00) [ 696.979833][T31218] FAT-fs (loop3): Can't find a valid FAT filesystem [ 696.980988][T31207] FAT-fs (loop4): Directory bread(block 119) failed [ 697.054520][T31207] FAT-fs (loop4): Directory bread(block 120) failed [ 697.075147][T31207] FAT-fs (loop4): Directory bread(block 121) failed 06:43:22 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:22 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7", 0x15}], 0x800019, 0x0) 06:43:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002046a0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2400) [ 697.663511][T31240] FAT-fs (loop3): invalid media value (0x00) [ 697.677966][T31234] FAT-fs (loop4): Directory bread(block 112) failed [ 697.694306][T31234] FAT-fs (loop4): Directory bread(block 113) failed 06:43:22 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) [ 697.707641][T31240] FAT-fs (loop3): Can't find a valid FAT filesystem [ 697.711245][T31234] FAT-fs (loop4): Directory bread(block 114) failed [ 697.733514][T31234] FAT-fs (loop4): Directory bread(block 115) failed 06:43:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 697.760137][T31234] FAT-fs (loop4): Directory bread(block 116) failed [ 697.779362][T31234] FAT-fs (loop4): Directory bread(block 117) failed [ 697.795498][T31234] FAT-fs (loop4): Directory bread(block 118) failed 06:43:22 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000404010002000270f7f8", 0x16}], 0x0, 0x0) [ 697.813961][T31234] FAT-fs (loop4): Directory bread(block 119) failed [ 697.829695][T31234] FAT-fs (loop4): Directory bread(block 120) failed [ 697.841299][T31234] FAT-fs (loop4): Directory bread(block 121) failed 06:43:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2418) 06:43:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:23 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002046b0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r6 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r5, r6) dup3(r4, r5, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)) 06:43:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2430) 06:43:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) [ 698.619008][T31269] FAT-fs (loop4): Directory bread(block 112) failed [ 698.647703][T31269] FAT-fs (loop4): Directory bread(block 113) failed 06:43:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 698.675963][T31269] FAT-fs (loop4): Directory bread(block 114) failed [ 698.699568][T31269] FAT-fs (loop4): Directory bread(block 115) failed [ 698.721156][T31269] FAT-fs (loop4): Directory bread(block 116) failed [ 698.742885][T31269] FAT-fs (loop4): Directory bread(block 117) failed 06:43:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r6 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r5, r6) dup3(r4, r5, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)) [ 698.776985][T31269] FAT-fs (loop4): Directory bread(block 118) failed [ 698.789987][T31269] FAT-fs (loop4): Directory bread(block 119) failed 06:43:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2448) 06:43:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) [ 698.841126][T31269] FAT-fs (loop4): Directory bread(block 120) failed [ 698.847943][T31269] FAT-fs (loop4): Directory bread(block 121) failed 06:43:24 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002046c0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r5 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r6 = inotify_add_watch(r5, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r5, r6) dup3(r4, r5, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)) 06:43:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2460) 06:43:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 699.635716][T31302] FAT-fs (loop4): Directory bread(block 112) failed [ 699.667863][T31302] FAT-fs (loop4): Directory bread(block 113) failed 06:43:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 699.700957][T31302] FAT-fs (loop4): Directory bread(block 114) failed [ 699.722343][T31302] FAT-fs (loop4): Directory bread(block 115) failed [ 699.741125][T31302] FAT-fs (loop4): Directory bread(block 116) failed [ 699.763316][T31302] FAT-fs (loop4): Directory bread(block 117) failed [ 699.785883][T31302] FAT-fs (loop4): Directory bread(block 118) failed [ 699.798366][T31302] FAT-fs (loop4): Directory bread(block 119) failed 06:43:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2478) 06:43:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 699.822980][T31302] FAT-fs (loop4): Directory bread(block 120) failed [ 699.851023][T31302] FAT-fs (loop4): Directory bread(block 121) failed 06:43:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r5 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r4, r5) dup3(r3, r4, 0x0) 06:43:25 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002046d0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2490) 06:43:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) r4 = inotify_add_watch(r3, &(0x7f00000000c0)='./file0/bus\x00', 0x82) inotify_rm_watch(r3, r4) [ 700.656552][T31336] FAT-fs (loop4): Directory bread(block 112) failed [ 700.674822][T31336] FAT-fs (loop4): Directory bread(block 113) failed 06:43:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 700.707313][T31336] FAT-fs (loop4): Directory bread(block 114) failed [ 700.722509][T31336] FAT-fs (loop4): Directory bread(block 115) failed [ 700.744373][T31336] FAT-fs (loop4): Directory bread(block 116) failed 06:43:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0/bus\x00', 0x82) [ 700.761368][T31336] FAT-fs (loop4): Directory bread(block 117) failed [ 700.779017][T31336] FAT-fs (loop4): Directory bread(block 118) failed [ 700.794731][T31336] FAT-fs (loop4): Directory bread(block 119) failed 06:43:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x24a8) [ 700.821012][T31336] FAT-fs (loop4): Directory bread(block 120) failed [ 700.861205][T31336] FAT-fs (loop4): Directory bread(block 121) failed 06:43:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:26 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002046e0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) inotify_init() mkdir(&(0x7f0000000080)='./file0/bus\x00', 0x0) 06:43:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x24c0) [ 701.699371][T31370] FAT-fs (loop4): Directory bread(block 112) failed [ 701.723596][T31370] FAT-fs (loop4): Directory bread(block 113) failed 06:43:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 701.746078][T31370] FAT-fs (loop4): Directory bread(block 114) failed [ 701.761221][T31370] FAT-fs (loop4): Directory bread(block 115) failed [ 701.773541][T31370] FAT-fs (loop4): Directory bread(block 116) failed 06:43:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) inotify_init() [ 701.799533][T31370] FAT-fs (loop4): Directory bread(block 117) failed [ 701.830434][T31370] FAT-fs (loop4): Directory bread(block 118) failed [ 701.848008][T31370] FAT-fs (loop4): Directory bread(block 119) failed 06:43:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x24d8) 06:43:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 701.880514][T31370] FAT-fs (loop4): Directory bread(block 120) failed [ 701.910393][T31370] FAT-fs (loop4): Directory bread(block 121) failed 06:43:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:27 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 06:43:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002046f0002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x24f0) 06:43:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 702.711537][T31406] FAT-fs (loop4): Directory bread(block 112) failed [ 702.750148][T31406] FAT-fs (loop4): Directory bread(block 113) failed [ 702.795079][T31406] FAT-fs (loop4): Directory bread(block 114) failed [ 702.820989][T31406] FAT-fs (loop4): Directory bread(block 115) failed [ 702.843934][T31406] FAT-fs (loop4): Directory bread(block 116) failed 06:43:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2508) 06:43:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 702.876997][T31406] FAT-fs (loop4): Directory bread(block 117) failed [ 702.909247][T31406] FAT-fs (loop4): Directory bread(block 118) failed 06:43:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 702.946113][T31406] FAT-fs (loop4): Directory bread(block 119) failed [ 702.981102][T31406] FAT-fs (loop4): Directory bread(block 120) failed [ 703.008104][T31406] FAT-fs (loop4): Directory bread(block 121) failed 06:43:28 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) 06:43:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204700002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2520) 06:43:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) modify_ldt$write(0x1, &(0x7f0000000140)={0x8, 0x201017fe, 0x0, 0x7, 0x8, 0x20000000001020, 0x6, 0x8e, 0x4, 0x6}, 0x10) 06:43:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 703.701300][T31436] FAT-fs (loop4): Directory bread(block 112) failed [ 703.711205][T31436] FAT-fs (loop4): Directory bread(block 113) failed [ 703.739233][T31436] FAT-fs (loop4): Directory bread(block 114) failed [ 703.765219][T31436] FAT-fs (loop4): Directory bread(block 115) failed [ 703.780953][T31436] FAT-fs (loop4): Directory bread(block 116) failed [ 703.800947][T31436] FAT-fs (loop4): Directory bread(block 117) failed [ 703.807709][T31436] FAT-fs (loop4): Directory bread(block 118) failed [ 703.829821][T31436] FAT-fs (loop4): Directory bread(block 119) failed [ 703.851217][T31436] FAT-fs (loop4): Directory bread(block 120) failed 06:43:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) 06:43:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2538) [ 703.888281][T31436] FAT-fs (loop4): Directory bread(block 121) failed 06:43:29 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204b40002000270f7f8", 0x16}], 0x800019, 0x0) 06:43:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") close(0xffffffffffffffff) 06:43:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2550) 06:43:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") close(0xffffffffffffffff) [ 704.749426][T31471] FAT-fs (loop4): Directory bread(block 180) failed [ 704.781816][T31471] FAT-fs (loop4): Directory bread(block 181) failed 06:43:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 704.804863][T31471] FAT-fs (loop4): Directory bread(block 182) failed [ 704.816846][T31471] FAT-fs (loop4): Directory bread(block 183) failed 06:43:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000100)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") close(0xffffffffffffffff) [ 704.872994][T31471] FAT-fs (loop4): Directory bread(block 184) failed [ 704.892751][T31471] FAT-fs (loop4): Directory bread(block 185) failed 06:43:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2568) [ 704.934606][T31471] FAT-fs (loop4): Directory bread(block 186) failed [ 704.955570][T31471] FAT-fs (loop4): Directory bread(block 187) failed [ 704.974608][T31471] FAT-fs (loop4): Directory bread(block 188) failed [ 705.016327][T31471] FAT-fs (loop4): Directory bread(block 189) failed 06:43:30 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf00}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000302000270f7f8", 0x16}], 0x800019, 0x0) 06:43:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2580) 06:43:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) [ 705.785705][T31506] FAT-fs (loop4): Directory bread(block 768) failed [ 705.799349][T31506] FAT-fs (loop4): Directory bread(block 769) failed [ 705.814367][T31506] FAT-fs (loop4): Directory bread(block 770) failed [ 705.848015][T31506] FAT-fs (loop4): Directory bread(block 771) failed [ 705.870003][T31506] FAT-fs (loop4): Directory bread(block 772) failed 06:43:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) 06:43:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2598) [ 705.892882][T31506] FAT-fs (loop4): Directory bread(block 773) failed [ 705.913404][T31506] FAT-fs (loop4): Directory bread(block 774) failed [ 705.922176][T31506] FAT-fs (loop4): Directory bread(block 775) failed [ 705.970214][T31506] FAT-fs (loop4): Directory bread(block 776) failed [ 706.011227][T31506] FAT-fs (loop4): Directory bread(block 777) failed 06:43:31 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:31 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204280402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) 06:43:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x25b0) 06:43:31 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x7f, 0x2000) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000600)=0x80000001) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000580)) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000380)=0xfffffffffffffdaa) splice(r1, &(0x7f0000000000), r0, &(0x7f0000000140), 0x8, 0xc) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000002c0)) r5 = dup(r4) r6 = msgget$private(0x0, 0x204) request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='mime_typenodev*&Z\x00', 0xfffffffffffffffd) msgctl$IPC_STAT(r6, 0x2, &(0x7f00000001c0)=""/34) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2000000c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x240040c1}, 0x24008085) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000500)='./bus\x00', 0x141046, 0x0) ftruncate(r7, 0x2007fff) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000004c0)=0x3) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f00000009c0)) fallocate(r4, 0x20, 0x9, 0x1) sendfile(r5, r7, 0x0, 0x8000fffffffe) [ 706.736060][T31533] FAT-fs (loop4): Directory bread(block 1064) failed [ 706.757733][T31533] FAT-fs (loop4): Directory bread(block 1065) failed [ 706.778897][T31533] FAT-fs (loop4): Directory bread(block 1066) failed 06:43:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x973, 0x8800) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 706.795051][T31533] FAT-fs (loop4): Directory bread(block 1067) failed [ 706.820924][T31533] FAT-fs (loop4): Directory bread(block 1068) failed [ 706.835692][T31533] FAT-fs (loop4): Directory bread(block 1069) failed [ 706.854672][T31533] FAT-fs (loop4): Directory bread(block 1070) failed [ 706.870977][T31533] FAT-fs (loop4): Directory bread(block 1071) failed [ 706.883459][T31533] FAT-fs (loop4): Directory bread(block 1072) failed 06:43:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x25c8) [ 706.918610][T31533] FAT-fs (loop4): Directory bread(block 1073) failed 06:43:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:32 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002048d0402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x25e0) 06:43:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 707.817335][T31570] FAT-fs (loop4): Directory bread(block 1165) failed [ 707.835932][T31570] FAT-fs (loop4): Directory bread(block 1166) failed [ 707.850325][T31570] FAT-fs (loop4): Directory bread(block 1167) failed [ 707.873976][T31570] FAT-fs (loop4): Directory bread(block 1168) failed [ 707.880723][T31570] FAT-fs (loop4): Directory bread(block 1169) failed [ 707.903753][T31570] FAT-fs (loop4): Directory bread(block 1170) failed [ 707.910596][T31570] FAT-fs (loop4): Directory bread(block 1171) failed [ 707.920404][T31570] FAT-fs (loop4): Directory bread(block 1172) failed [ 707.930163][T31570] FAT-fs (loop4): Directory bread(block 1173) failed [ 707.940455][T31570] FAT-fs (loop4): Directory bread(block 1174) failed 06:43:32 executing program 0: 06:43:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x25f8) 06:43:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002048e0402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:32 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) [ 708.392037][T31587] FAT-fs (loop4): Directory bread(block 1166) failed [ 708.409241][T31587] FAT-fs (loop4): Directory bread(block 1167) failed [ 708.424577][T31587] FAT-fs (loop4): Directory bread(block 1168) failed [ 708.433715][T31587] FAT-fs (loop4): Directory bread(block 1169) failed [ 708.441335][T31587] FAT-fs (loop4): Directory bread(block 1170) failed [ 708.448539][T31587] FAT-fs (loop4): Directory bread(block 1171) failed [ 708.465947][T31587] FAT-fs (loop4): Directory bread(block 1172) failed [ 708.477945][T31587] FAT-fs (loop4): Directory bread(block 1173) failed [ 708.485855][T31587] FAT-fs (loop4): Directory bread(block 1174) failed [ 708.501683][T31587] FAT-fs (loop4): Directory bread(block 1175) failed 06:43:33 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1f40}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:33 executing program 0: 06:43:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002048f0402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2610) 06:43:33 executing program 0: 06:43:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 708.819328][T31601] FAT-fs (loop4): Directory bread(block 1167) failed [ 708.834494][T31601] FAT-fs (loop4): Directory bread(block 1168) failed [ 708.849634][T31601] FAT-fs (loop4): Directory bread(block 1169) failed [ 708.873283][T31601] FAT-fs (loop4): Directory bread(block 1170) failed [ 708.896980][T31601] FAT-fs (loop4): Directory bread(block 1171) failed 06:43:33 executing program 0: [ 708.927392][T31601] FAT-fs (loop4): Directory bread(block 1172) failed [ 708.935959][T31601] FAT-fs (loop4): Directory bread(block 1173) failed 06:43:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) 06:43:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2628) [ 708.979299][T31601] FAT-fs (loop4): Directory bread(block 1174) failed [ 709.004750][T31601] FAT-fs (loop4): Directory bread(block 1175) failed [ 709.025222][T31601] FAT-fs (loop4): Directory bread(block 1176) failed 06:43:34 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:34 executing program 0: 06:43:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204900402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2640) 06:43:34 executing program 0: 06:43:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 709.843891][T31634] FAT-fs (loop4): Directory bread(block 1168) failed [ 709.884307][T31634] FAT-fs (loop4): Directory bread(block 1169) failed [ 709.918546][T31634] FAT-fs (loop4): Directory bread(block 1170) failed 06:43:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:34 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = dup(r0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 06:43:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2658) [ 709.957933][T31634] FAT-fs (loop4): Directory bread(block 1171) failed [ 710.026119][T31634] FAT-fs (loop4): Directory bread(block 1172) failed [ 710.055907][T31634] FAT-fs (loop4): Directory bread(block 1173) failed [ 710.062887][T31634] FAT-fs (loop4): Directory bread(block 1174) failed [ 710.083873][T31634] FAT-fs (loop4): Directory bread(block 1175) failed [ 710.106548][T31634] FAT-fs (loop4): Directory bread(block 1176) failed [ 710.129347][T31634] FAT-fs (loop4): Directory bread(block 1177) failed 06:43:35 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:35 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x97d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) unshare(0x8000000) 06:43:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204910402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2670) 06:43:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 710.803534][T31662] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 06:43:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 710.856181][T31665] FAT-fs (loop4): Directory bread(block 1169) failed [ 710.866602][T31665] FAT-fs (loop4): Directory bread(block 1170) failed [ 710.898834][T31665] FAT-fs (loop4): Directory bread(block 1171) failed [ 710.924976][T31665] FAT-fs (loop4): Directory bread(block 1172) failed [ 710.948608][T31665] FAT-fs (loop4): Directory bread(block 1173) failed [ 710.972139][T31665] FAT-fs (loop4): Directory bread(block 1174) failed [ 710.979218][T31665] FAT-fs (loop4): Directory bread(block 1175) failed [ 710.992684][T31665] FAT-fs (loop4): Directory bread(block 1176) failed 06:43:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2688) 06:43:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xc62d, 0x0) 06:43:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 710.999740][T31665] FAT-fs (loop4): Directory bread(block 1177) failed [ 711.028220][T31665] FAT-fs (loop4): Directory bread(block 1178) failed 06:43:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:36 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204920402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xc62d, 0x0) 06:43:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x26a0) 06:43:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0}) 06:43:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 711.907752][T31697] FAT-fs (loop4): Directory bread(block 1170) failed [ 711.932494][T31697] FAT-fs (loop4): Directory bread(block 1171) failed [ 711.960566][T31697] FAT-fs (loop4): Directory bread(block 1172) failed [ 711.974761][T31697] FAT-fs (loop4): Directory bread(block 1173) failed [ 711.984641][T31697] FAT-fs (loop4): Directory bread(block 1174) failed [ 711.994548][T31697] FAT-fs (loop4): Directory bread(block 1175) failed [ 712.026883][T31697] FAT-fs (loop4): Directory bread(block 1176) failed [ 712.037351][T31697] FAT-fs (loop4): Directory bread(block 1177) failed [ 712.056817][T31697] FAT-fs (loop4): Directory bread(block 1178) failed 06:43:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x26b8) 06:43:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 712.076916][T31697] FAT-fs (loop4): Directory bread(block 1179) failed 06:43:37 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) 06:43:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204930402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x26d0) [ 712.832768][T31723] block nbd0: shutting down sockets 06:43:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 712.891468][T31729] FAT-fs (loop4): Directory bread(block 1171) failed [ 712.911924][T31729] FAT-fs (loop4): Directory bread(block 1172) failed [ 712.922316][T31723] block nbd0: shutting down sockets 06:43:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 712.939598][T31729] FAT-fs (loop4): Directory bread(block 1173) failed [ 712.966513][T31729] FAT-fs (loop4): Directory bread(block 1174) failed [ 712.995571][T31729] FAT-fs (loop4): Directory bread(block 1175) failed 06:43:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:37 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 713.014189][T31729] FAT-fs (loop4): Directory bread(block 1176) failed [ 713.035437][T31729] FAT-fs (loop4): Directory bread(block 1177) failed 06:43:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x26e8) [ 713.065671][T31729] FAT-fs (loop4): Directory bread(block 1178) failed [ 713.101114][T31729] FAT-fs (loop4): Directory bread(block 1179) failed [ 713.139500][T31729] FAT-fs (loop4): Directory bread(block 1180) failed 06:43:38 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204940402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2700) 06:43:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 713.910716][T31761] FAT-fs (loop4): Directory bread(block 1172) failed [ 713.931059][T31761] FAT-fs (loop4): Directory bread(block 1173) failed [ 713.954449][T31761] FAT-fs (loop4): Directory bread(block 1174) failed 06:43:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 713.989343][T31761] FAT-fs (loop4): Directory bread(block 1175) failed [ 714.008925][T31761] FAT-fs (loop4): Directory bread(block 1176) failed [ 714.031006][T31761] FAT-fs (loop4): Directory bread(block 1177) failed 06:43:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) [ 714.050961][T31761] FAT-fs (loop4): Directory bread(block 1178) failed [ 714.059518][T31761] FAT-fs (loop4): Directory bread(block 1179) failed 06:43:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2718) [ 714.091865][T31761] FAT-fs (loop4): Directory bread(block 1180) failed [ 714.100736][T31772] binder: 31771:31772 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 714.115696][T31761] FAT-fs (loop4): Directory bread(block 1181) failed 06:43:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204950402000270f7f8", 0x16}], 0x800019, 0x0) [ 714.269412][T31785] FAT-fs (loop4): Directory bread(block 1173) failed [ 714.300537][T31785] FAT-fs (loop4): Directory bread(block 1174) failed [ 714.319148][T31785] FAT-fs (loop4): Directory bread(block 1175) failed [ 714.328063][T31785] FAT-fs (loop4): Directory bread(block 1176) failed [ 714.341045][T31785] FAT-fs (loop4): Directory bread(block 1177) failed [ 714.347935][T31785] FAT-fs (loop4): Directory bread(block 1178) failed [ 714.354899][T31785] FAT-fs (loop4): Directory bread(block 1179) failed [ 714.361954][T31785] FAT-fs (loop4): Directory bread(block 1180) failed [ 714.368763][T31785] FAT-fs (loop4): Directory bread(block 1181) failed [ 714.375674][T31785] FAT-fs (loop4): Directory bread(block 1182) failed 06:43:39 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7d00}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2730) 06:43:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204960402000270f7f8", 0x16}], 0x800019, 0x0) [ 714.888972][T31793] FAT-fs (loop4): Directory bread(block 1174) failed [ 714.900328][T31799] binder: 31798:31799 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 714.907954][T31793] FAT-fs (loop4): Directory bread(block 1175) failed [ 714.923269][T31793] FAT-fs (loop4): Directory bread(block 1176) failed [ 714.930312][T31793] FAT-fs (loop4): Directory bread(block 1177) failed 06:43:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 714.949264][T31793] FAT-fs (loop4): Directory bread(block 1178) failed [ 714.986931][T31793] FAT-fs (loop4): Directory bread(block 1179) failed [ 715.014156][T31793] FAT-fs (loop4): Directory bread(block 1180) failed [ 715.034062][T31793] FAT-fs (loop4): Directory bread(block 1181) failed 06:43:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2748) 06:43:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) 06:43:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 715.060936][T31793] FAT-fs (loop4): Directory bread(block 1182) failed [ 715.079502][T31811] binder: 31810:31811 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 715.100932][T31793] FAT-fs (loop4): Directory bread(block 1183) failed 06:43:40 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a02}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) 06:43:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000502000270f7f8", 0x16}], 0x800019, 0x0) 06:43:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2760) [ 715.883036][T31827] FAT-fs (loop4): Directory bread(block 1280) failed [ 715.915139][T31827] FAT-fs (loop4): Directory bread(block 1281) failed 06:43:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) [ 715.930199][T31827] FAT-fs (loop4): Directory bread(block 1282) failed 06:43:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 715.979278][T31827] FAT-fs (loop4): Directory bread(block 1283) failed [ 716.007669][T31827] FAT-fs (loop4): Directory bread(block 1284) failed 06:43:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2778) [ 716.028843][T31827] FAT-fs (loop4): Directory bread(block 1285) failed [ 716.048454][T31827] FAT-fs (loop4): Directory bread(block 1286) failed 06:43:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0xffffffffffffffff) [ 716.083096][T31827] FAT-fs (loop4): Directory bread(block 1287) failed [ 716.110421][T31827] FAT-fs (loop4): Directory bread(block 1288) failed [ 716.144854][T31827] FAT-fs (loop4): Directory bread(block 1289) failed 06:43:41 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000b}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000602000270f7f8", 0x16}], 0x800019, 0x0) 06:43:41 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x6, [0x0, 0x400000000, 0x401, 0x3, 0x16, 0x4f9, 0x16bd4839, 0x87, 0x3, 0x70000000000, 0x1, 0x9, 0x717, 0x3f1, 0x0, 0x8, 0x870, 0x81, 0x0, 0x80000, 0x6, 0x1d87, 0x7, 0x2400, 0x3, 0x2, 0x2, 0xff, 0x7fffffff, 0x167, 0x5, 0x4, 0x0, 0x3f, 0x1ff, 0x5, 0x1000, 0x200, 0x7, 0x7, 0x40, 0x0, 0x9, 0xffffffff, 0x7f, 0x902, 0x0, 0x3f5c8e2], 0xb}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)) 06:43:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2790) [ 716.852791][T31860] binder: 31859:31860 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 716.887814][T31862] FAT-fs (loop4): Directory bread(block 1536) failed 06:43:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 716.913016][T31862] FAT-fs (loop4): Directory bread(block 1537) failed [ 716.920382][T31862] FAT-fs (loop4): Directory bread(block 1538) failed [ 716.934658][T31862] FAT-fs (loop4): Directory bread(block 1539) failed [ 716.948197][T31862] FAT-fs (loop4): Directory bread(block 1540) failed [ 716.981507][T31862] FAT-fs (loop4): Directory bread(block 1541) failed [ 717.000154][T31862] FAT-fs (loop4): Directory bread(block 1542) failed [ 717.013191][T31862] FAT-fs (loop4): Directory bread(block 1543) failed 06:43:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 717.028749][T31862] FAT-fs (loop4): Directory bread(block 1544) failed 06:43:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x27a8) [ 717.063361][T31862] FAT-fs (loop4): Directory bread(block 1545) failed 06:43:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000702000270f7f8", 0x16}], 0x800019, 0x0) 06:43:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:41 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x6, [0x0, 0x400000000, 0x401, 0x3, 0x16, 0x4f9, 0x16bd4839, 0x87, 0x3, 0x70000000000, 0x1, 0x9, 0x717, 0x3f1, 0x0, 0x8, 0x870, 0x81, 0x0, 0x80000, 0x6, 0x1d87, 0x7, 0x2400, 0x3, 0x2, 0x2, 0xff, 0x7fffffff, 0x167, 0x5, 0x4, 0x0, 0x3f, 0x1ff, 0x5, 0x1000, 0x200, 0x7, 0x7, 0x40, 0x0, 0x9, 0xffffffff, 0x7f, 0x902, 0x0, 0x3f5c8e2], 0xb}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)) [ 717.512366][T31887] FAT-fs (loop4): Directory bread(block 1792) failed [ 717.558101][T31887] FAT-fs (loop4): Directory bread(block 1793) failed [ 717.579651][T31887] FAT-fs (loop4): Directory bread(block 1794) failed [ 717.595779][T31887] FAT-fs (loop4): Directory bread(block 1795) failed [ 717.612868][T31887] FAT-fs (loop4): Directory bread(block 1796) failed [ 717.629928][T31887] FAT-fs (loop4): Directory bread(block 1797) failed [ 717.647377][T31887] FAT-fs (loop4): Directory bread(block 1798) failed [ 717.655756][T31887] FAT-fs (loop4): Directory bread(block 1799) failed [ 717.663061][T31887] FAT-fs (loop4): Directory bread(block 1800) failed [ 717.669959][T31887] FAT-fs (loop4): Directory bread(block 1801) failed 06:43:42 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7d000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x27c0) 06:43:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 717.782632][T31896] binder: 31895:31896 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x27d8) 06:43:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000902000270f7f8", 0x16}], 0x800019, 0x0) 06:43:42 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x6, [0x0, 0x400000000, 0x401, 0x3, 0x16, 0x4f9, 0x16bd4839, 0x87, 0x3, 0x70000000000, 0x1, 0x9, 0x717, 0x3f1, 0x0, 0x8, 0x870, 0x81, 0x0, 0x80000, 0x6, 0x1d87, 0x7, 0x2400, 0x3, 0x2, 0x2, 0xff, 0x7fffffff, 0x167, 0x5, 0x4, 0x0, 0x3f, 0x1ff, 0x5, 0x1000, 0x200, 0x7, 0x7, 0x40, 0x0, 0x9, 0xffffffff, 0x7f, 0x902, 0x0, 0x3f5c8e2], 0xb}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)) 06:43:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x27f0) [ 718.444968][T31915] FAT-fs (loop4): Directory bread(block 2304) failed [ 718.467737][T31915] FAT-fs (loop4): Directory bread(block 2305) failed [ 718.482357][T31915] FAT-fs (loop4): Directory bread(block 2306) failed [ 718.489395][T31915] FAT-fs (loop4): Directory bread(block 2307) failed 06:43:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 718.521213][T31915] FAT-fs (loop4): Directory bread(block 2308) failed [ 718.527958][T31915] FAT-fs (loop4): Directory bread(block 2309) failed [ 718.557753][T31915] FAT-fs (loop4): Directory bread(block 2310) failed [ 718.580886][T31915] FAT-fs (loop4): Directory bread(block 2311) failed [ 718.587736][T31915] FAT-fs (loop4): Directory bread(block 2312) failed [ 718.610957][T31915] FAT-fs (loop4): Directory bread(block 2313) failed 06:43:43 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000a02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:43 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x6, [0x0, 0x400000000, 0x401, 0x3, 0x16, 0x4f9, 0x16bd4839, 0x87, 0x3, 0x70000000000, 0x1, 0x9, 0x717, 0x3f1, 0x0, 0x8, 0x870, 0x81, 0x0, 0x80000, 0x6, 0x1d87, 0x7, 0x2400, 0x3, 0x2, 0x2, 0xff, 0x7fffffff, 0x167, 0x5, 0x4, 0x0, 0x3f, 0x1ff, 0x5, 0x1000, 0x200, 0x7, 0x7, 0x40, 0x0, 0x9, 0xffffffff, 0x7f, 0x902, 0x0, 0x3f5c8e2], 0xb}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) 06:43:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2808) [ 719.023728][T31937] binder: 31936:31937 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 719.043647][T31940] FAT-fs (loop4): Directory bread(block 2560) failed [ 719.050415][T31940] FAT-fs (loop4): Directory bread(block 2561) failed 06:43:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 719.104181][T31940] FAT-fs (loop4): Directory bread(block 2562) failed [ 719.138162][T31940] FAT-fs (loop4): Directory bread(block 2563) failed [ 719.156164][T31940] FAT-fs (loop4): Directory bread(block 2564) failed [ 719.171938][T31940] FAT-fs (loop4): Directory bread(block 2565) failed [ 719.187909][T31940] FAT-fs (loop4): Directory bread(block 2566) failed [ 719.199066][T31940] FAT-fs (loop4): Directory bread(block 2567) failed [ 719.226947][T31940] FAT-fs (loop4): Directory bread(block 2568) failed [ 719.245571][T31940] FAT-fs (loop4): Directory bread(block 2569) failed 06:43:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2820) 06:43:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000b02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:44 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0x6, [0x0, 0x400000000, 0x401, 0x3, 0x16, 0x4f9, 0x16bd4839, 0x87, 0x3, 0x70000000000, 0x1, 0x9, 0x717, 0x3f1, 0x0, 0x8, 0x870, 0x81, 0x0, 0x80000, 0x6, 0x1d87, 0x7, 0x2400, 0x3, 0x2, 0x2, 0xff, 0x7fffffff, 0x167, 0x5, 0x4, 0x0, 0x3f, 0x1ff, 0x5, 0x1000, 0x200, 0x7, 0x7, 0x40, 0x0, 0x9, 0xffffffff, 0x7f, 0x902, 0x0, 0x3f5c8e2], 0xb}) 06:43:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 719.706953][T31963] FAT-fs (loop4): Directory bread(block 2816) failed [ 719.714325][T31963] FAT-fs (loop4): Directory bread(block 2817) failed [ 719.729030][T31963] FAT-fs (loop4): Directory bread(block 2818) failed [ 719.739354][T31963] FAT-fs (loop4): Directory bread(block 2819) failed [ 719.760966][T31963] FAT-fs (loop4): Directory bread(block 2820) failed [ 719.777219][T31963] FAT-fs (loop4): Directory bread(block 2821) failed [ 719.777248][T31963] FAT-fs (loop4): Directory bread(block 2822) failed [ 719.777273][T31963] FAT-fs (loop4): Directory bread(block 2823) failed [ 719.777396][T31963] FAT-fs (loop4): Directory bread(block 2824) failed 06:43:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2838) 06:43:44 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 719.917332][T31963] FAT-fs (loop4): Directory bread(block 2825) failed [ 720.033905][T31976] binder: 31975:31976 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000c02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:44 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') 06:43:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 720.398811][T31989] FAT-fs (loop4): Directory bread(block 3072) failed [ 720.426295][T31989] FAT-fs (loop4): Directory bread(block 3073) failed [ 720.449496][T31989] FAT-fs (loop4): Directory bread(block 3074) failed [ 720.473425][T31989] FAT-fs (loop4): Directory bread(block 3075) failed 06:43:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2850) 06:43:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 720.496255][T31989] FAT-fs (loop4): Directory bread(block 3076) failed [ 720.511979][T31989] FAT-fs (loop4): Directory bread(block 3077) failed [ 720.518946][T31989] FAT-fs (loop4): Directory bread(block 3078) failed [ 720.525988][T31989] FAT-fs (loop4): Directory bread(block 3079) failed [ 720.541624][T31989] FAT-fs (loop4): Directory bread(block 3080) failed [ 720.554665][T31989] FAT-fs (loop4): Directory bread(block 3081) failed 06:43:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000d02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:45 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 721.018947][T32005] binder: 32001:32005 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 721.087100][T32012] FAT-fs (loop4): Directory bread(block 3328) failed [ 721.109948][T32012] FAT-fs (loop4): Directory bread(block 3329) failed [ 721.127377][T32012] FAT-fs (loop4): Directory bread(block 3330) failed 06:43:45 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2868) [ 721.156950][T32012] FAT-fs (loop4): Directory bread(block 3331) failed [ 721.177566][T32012] FAT-fs (loop4): Directory bread(block 3332) failed 06:43:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 721.210214][T32012] FAT-fs (loop4): Directory bread(block 3333) failed [ 721.221154][T32012] FAT-fs (loop4): Directory bread(block 3334) failed [ 721.240429][T32012] FAT-fs (loop4): Directory bread(block 3335) failed [ 721.255183][T32012] FAT-fs (loop4): Directory bread(block 3336) failed [ 721.264640][T32012] FAT-fs (loop4): Directory bread(block 3337) failed 06:43:45 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:43:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000e02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2880) 06:43:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:46 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7d0000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 722.036732][T32035] FAT-fs (loop4): Directory bread(block 3584) failed [ 722.055988][T32035] FAT-fs (loop4): Directory bread(block 3585) failed [ 722.065897][T32035] FAT-fs (loop4): Directory bread(block 3586) failed 06:43:46 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 722.088836][T32035] FAT-fs (loop4): Directory bread(block 3587) failed [ 722.107176][T32047] binder: 32043:32047 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 722.120623][T32035] FAT-fs (loop4): Directory bread(block 3588) failed 06:43:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 722.161971][T32035] FAT-fs (loop4): Directory bread(block 3589) failed [ 722.205126][T32035] FAT-fs (loop4): Directory bread(block 3590) failed [ 722.215624][T32035] FAT-fs (loop4): Directory bread(block 3591) failed [ 722.234953][T32035] FAT-fs (loop4): Directory bread(block 3592) failed 06:43:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 722.257005][T32035] FAT-fs (loop4): Directory bread(block 3593) failed 06:43:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2898) 06:43:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204000f02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:47 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:43:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x28b0) 06:43:47 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00700}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 723.066772][T32083] binder: 32080:32083 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 723.147565][T32073] FAT-fs (loop4): Directory bread(block 3840) failed [ 723.160357][T32073] FAT-fs (loop4): Directory bread(block 3841) failed [ 723.187650][T32073] FAT-fs (loop4): Directory bread(block 3842) failed [ 723.215637][T32073] FAT-fs (loop4): Directory bread(block 3843) failed [ 723.237306][T32073] FAT-fs (loop4): Directory bread(block 3844) failed [ 723.261310][T32073] FAT-fs (loop4): Directory bread(block 3845) failed [ 723.284376][T32073] FAT-fs (loop4): Directory bread(block 3846) failed [ 723.291258][T32073] FAT-fs (loop4): Directory bread(block 3847) failed [ 723.298166][T32073] FAT-fs (loop4): Directory bread(block 3848) failed [ 723.305027][T32073] FAT-fs (loop4): Directory bread(block 3849) failed 06:43:47 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001102000270f7f8", 0x16}], 0x800019, 0x0) 06:43:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x28c8) [ 723.612093][T32097] FAT-fs (loop4): Directory bread(block 4352) failed [ 723.627423][T32097] FAT-fs (loop4): Directory bread(block 4353) failed [ 723.650688][T32097] FAT-fs (loop4): Directory bread(block 4354) failed [ 723.661101][T32097] FAT-fs (loop4): Directory bread(block 4355) failed [ 723.667918][T32097] FAT-fs (loop4): Directory bread(block 4356) failed 06:43:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 723.744932][T32097] FAT-fs (loop4): Directory bread(block 4357) failed [ 723.790926][T32097] FAT-fs (loop4): Directory bread(block 4358) failed [ 723.810331][T32097] FAT-fs (loop4): Directory bread(block 4359) failed 06:43:48 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 723.835809][T32097] FAT-fs (loop4): Directory bread(block 4360) failed [ 723.861072][T32097] FAT-fs (loop4): Directory bread(block 4361) failed 06:43:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001202000270f7f8", 0x16}], 0x800019, 0x0) [ 723.953649][T32121] binder: 32119:32121 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:48 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x28e0) 06:43:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:49 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 724.535063][T32124] FAT-fs (loop4): Directory bread(block 4608) failed [ 724.552123][T32124] FAT-fs (loop4): Directory bread(block 4609) failed [ 724.576813][T32124] FAT-fs (loop4): Directory bread(block 4610) failed [ 724.600625][T32124] FAT-fs (loop4): Directory bread(block 4611) failed 06:43:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 724.622441][T32124] FAT-fs (loop4): Directory bread(block 4612) failed [ 724.641590][T32124] FAT-fs (loop4): Directory bread(block 4613) failed [ 724.652525][T32124] FAT-fs (loop4): Directory bread(block 4614) failed [ 724.659651][T32124] FAT-fs (loop4): Directory bread(block 4615) failed [ 724.667578][T32124] FAT-fs (loop4): Directory bread(block 4616) failed [ 724.675317][T32124] FAT-fs (loop4): Directory bread(block 4617) failed 06:43:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001302000270f7f8", 0x16}], 0x800019, 0x0) 06:43:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x28f8) 06:43:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 724.854424][T32149] binder: 32148:32149 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:49 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 724.990324][T32156] FAT-fs (loop4): Directory bread(block 4864) failed [ 725.040957][T32156] FAT-fs (loop4): Directory bread(block 4865) failed [ 725.047724][T32156] FAT-fs (loop4): Directory bread(block 4866) failed [ 725.071638][T32156] FAT-fs (loop4): Directory bread(block 4867) failed [ 725.078405][T32156] FAT-fs (loop4): Directory bread(block 4868) failed [ 725.110939][T32156] FAT-fs (loop4): Directory bread(block 4869) failed [ 725.117696][T32156] FAT-fs (loop4): Directory bread(block 4870) failed [ 725.140878][T32156] FAT-fs (loop4): Directory bread(block 4871) failed [ 725.147728][T32156] FAT-fs (loop4): Directory bread(block 4872) failed [ 725.173927][T32156] FAT-fs (loop4): Directory bread(block 4873) failed 06:43:49 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2910) 06:43:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:50 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 725.739181][T32180] FAT-fs (loop4): Directory bread(block 5120) failed [ 725.755244][T32180] FAT-fs (loop4): Directory bread(block 5121) failed [ 725.770497][T32184] binder: 32178:32184 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 725.779839][T32180] FAT-fs (loop4): Directory bread(block 5122) failed 06:43:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2928) [ 725.810004][T32180] FAT-fs (loop4): Directory bread(block 5123) failed [ 725.817888][T32188] binder: 32178:32188 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 725.838861][T32180] FAT-fs (loop4): Directory bread(block 5124) failed 06:43:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 725.857681][T32180] FAT-fs (loop4): Directory bread(block 5125) failed [ 725.869168][T32180] FAT-fs (loop4): Directory bread(block 5126) failed [ 725.876519][T32180] FAT-fs (loop4): Directory bread(block 5127) failed [ 725.883945][T32180] FAT-fs (loop4): Directory bread(block 5128) failed [ 725.898055][T32180] FAT-fs (loop4): Directory bread(block 5129) failed 06:43:50 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001502000270f7f8", 0x16}], 0x800019, 0x0) 06:43:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:51 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2940) 06:43:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:51 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 726.731401][T32207] FAT-fs (loop4): Directory bread(block 5376) failed [ 726.756493][T32207] FAT-fs (loop4): Directory bread(block 5377) failed [ 726.757221][T32217] binder: 32214:32217 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 726.763549][T32207] FAT-fs (loop4): Directory bread(block 5378) failed 06:43:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 726.782751][T32207] FAT-fs (loop4): Directory bread(block 5379) failed [ 726.795234][T32207] FAT-fs (loop4): Directory bread(block 5380) failed [ 726.807215][T32207] FAT-fs (loop4): Directory bread(block 5381) failed [ 726.816121][T32207] FAT-fs (loop4): Directory bread(block 5382) failed [ 726.823337][T32207] FAT-fs (loop4): Directory bread(block 5383) failed [ 726.830412][T32207] FAT-fs (loop4): Directory bread(block 5384) failed [ 726.837492][T32207] FAT-fs (loop4): Directory bread(block 5385) failed [ 726.850327][T32217] binder: 32214:32217 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2958) 06:43:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001602000270f7f8", 0x16}], 0x800019, 0x0) 06:43:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:51 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 727.488109][T32234] FAT-fs (loop4): Directory bread(block 5632) failed 06:43:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2970) [ 727.531127][T32234] FAT-fs (loop4): Directory bread(block 5633) failed [ 727.540124][T32234] FAT-fs (loop4): Directory bread(block 5634) failed [ 727.587075][T32234] FAT-fs (loop4): Directory bread(block 5635) failed [ 727.600501][T32234] FAT-fs (loop4): Directory bread(block 5636) failed [ 727.619767][T32234] FAT-fs (loop4): Directory bread(block 5637) failed 06:43:52 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 727.634827][T32234] FAT-fs (loop4): Directory bread(block 5638) failed [ 727.641793][T32234] FAT-fs (loop4): Directory bread(block 5639) failed [ 727.648789][T32234] FAT-fs (loop4): Directory bread(block 5640) failed [ 727.661398][T32234] FAT-fs (loop4): Directory bread(block 5641) failed [ 727.687836][T32246] binder: 32245:32246 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 727.723403][T32246] binder: 32245:32246 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001702000270f7f8", 0x16}], 0x800019, 0x0) 06:43:52 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2988) 06:43:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 728.239941][T32259] FAT-fs (loop4): Directory bread(block 5888) failed [ 728.258420][T32259] FAT-fs (loop4): Directory bread(block 5889) failed [ 728.268382][T32259] FAT-fs (loop4): Directory bread(block 5890) failed [ 728.283486][T32259] FAT-fs (loop4): Directory bread(block 5891) failed [ 728.290716][T32259] FAT-fs (loop4): Directory bread(block 5892) failed [ 728.305184][T32259] FAT-fs (loop4): Directory bread(block 5893) failed [ 728.305215][T32259] FAT-fs (loop4): Directory bread(block 5894) failed [ 728.305247][T32259] FAT-fs (loop4): Directory bread(block 5895) failed [ 728.336180][T32259] FAT-fs (loop4): Directory bread(block 5896) failed [ 728.347905][T32259] FAT-fs (loop4): Directory bread(block 5897) failed 06:43:52 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001802000270f7f8", 0x16}], 0x800019, 0x0) 06:43:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:53 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x29a0) 06:43:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 728.970201][T32276] FAT-fs (loop4): Directory bread(block 6144) failed [ 728.996850][T32276] FAT-fs (loop4): Directory bread(block 6145) failed 06:43:53 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 729.026030][T32276] FAT-fs (loop4): Directory bread(block 6146) failed [ 729.043186][T32276] FAT-fs (loop4): Directory bread(block 6147) failed [ 729.057600][T32276] FAT-fs (loop4): Directory bread(block 6148) failed 06:43:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 729.091954][T32276] FAT-fs (loop4): Directory bread(block 6149) failed [ 729.115682][T32276] FAT-fs (loop4): Directory bread(block 6150) failed [ 729.134688][T32276] FAT-fs (loop4): Directory bread(block 6151) failed [ 729.147201][T32301] binder: 32297:32301 Acquire 1 refcount change on invalid ref 0 ret -22 [ 729.148700][T32276] FAT-fs (loop4): Directory bread(block 6152) failed [ 729.174202][T32276] FAT-fs (loop4): Directory bread(block 6153) failed 06:43:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x29b8) [ 729.191848][T32301] binder: 32297:32301 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 729.207131][T32301] binder: 32297:32301 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001902000270f7f8", 0x16}], 0x800019, 0x0) 06:43:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:53 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:54 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x29d0) [ 729.898204][T32315] FAT-fs (loop4): Directory bread(block 6400) failed [ 729.907292][T32315] FAT-fs (loop4): Directory bread(block 6401) failed 06:43:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 729.940610][T32315] FAT-fs (loop4): Directory bread(block 6402) failed 06:43:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 729.982023][T32315] FAT-fs (loop4): Directory bread(block 6403) failed [ 729.988790][T32315] FAT-fs (loop4): Directory bread(block 6404) failed 06:43:54 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 730.033731][T32315] FAT-fs (loop4): Directory bread(block 6405) failed [ 730.056543][T32315] FAT-fs (loop4): Directory bread(block 6406) failed [ 730.076385][T32315] FAT-fs (loop4): Directory bread(block 6407) failed [ 730.084928][T32331] binder: 32329:32331 Acquire 1 refcount change on invalid ref 0 ret -22 [ 730.091097][T32315] FAT-fs (loop4): Directory bread(block 6408) failed [ 730.108242][T32315] FAT-fs (loop4): Directory bread(block 6409) failed [ 730.124772][T32331] binder: 32329:32331 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 06:43:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x29e8) 06:43:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 730.160021][T32331] binder: 32329:32331 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001a02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:55 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 730.534810][T32344] FAT-fs (loop4): Directory bread(block 6656) failed [ 730.550982][T32344] FAT-fs (loop4): Directory bread(block 6657) failed [ 730.558030][T32344] FAT-fs (loop4): Directory bread(block 6658) failed 06:43:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a00) [ 730.586172][T32344] FAT-fs (loop4): Directory bread(block 6659) failed [ 730.601346][T32344] FAT-fs (loop4): Directory bread(block 6660) failed [ 730.630959][T32344] FAT-fs (loop4): Directory bread(block 6661) failed [ 730.642898][T32344] FAT-fs (loop4): Directory bread(block 6662) failed [ 730.658158][T32344] FAT-fs (loop4): Directory bread(block 6663) failed [ 730.681811][T32344] FAT-fs (loop4): Directory bread(block 6664) failed [ 730.696688][T32344] FAT-fs (loop4): Directory bread(block 6665) failed 06:43:55 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a18) 06:43:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204001b02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 731.027275][T32365] binder: 32363:32365 Acquire 1 refcount change on invalid ref 0 ret -22 06:43:55 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 731.089321][T32365] binder: 32363:32365 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 731.128219][T32365] binder: 32363:32365 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 731.139650][T32371] FAT-fs (loop4): Directory bread(block 6912) failed [ 731.156059][T32371] FAT-fs (loop4): Directory bread(block 6913) failed 06:43:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:55 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 731.189049][T32371] FAT-fs (loop4): Directory bread(block 6914) failed [ 731.206386][T32371] FAT-fs (loop4): Directory bread(block 6915) failed [ 731.229028][T32371] FAT-fs (loop4): Directory bread(block 6916) failed 06:43:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 731.273568][T32371] FAT-fs (loop4): Directory bread(block 6917) failed 06:43:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a30) [ 731.323252][T32371] FAT-fs (loop4): Directory bread(block 6918) failed [ 731.349864][T32371] FAT-fs (loop4): Directory bread(block 6919) failed 06:43:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 731.385931][T32371] FAT-fs (loop4): Directory bread(block 6920) failed [ 731.409924][T32371] FAT-fs (loop4): Directory bread(block 6921) failed 06:43:56 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:56 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204fc2502000270f7f8", 0x16}], 0x800019, 0x0) 06:43:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a48) 06:43:56 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 731.981596][T32401] FAT-fs (loop4): Directory bread(block 9724) failed [ 732.007974][T32401] FAT-fs (loop4): Directory bread(block 9725) failed 06:43:56 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 732.040961][T32401] FAT-fs (loop4): Directory bread(block 9726) failed [ 732.064596][T32401] FAT-fs (loop4): Directory bread(block 9727) failed 06:43:56 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 732.086531][T32401] FAT-fs (loop4): Directory bread(block 9728) failed [ 732.124373][T32401] FAT-fs (loop4): Directory bread(block 9729) failed [ 732.133820][T32401] FAT-fs (loop4): Directory bread(block 9730) failed 06:43:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a60) 06:43:56 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 732.169816][T32401] FAT-fs (loop4): Directory bread(block 9731) failed [ 732.196190][T32401] FAT-fs (loop4): Directory bread(block 9732) failed [ 732.249538][T32401] FAT-fs (loop4): Directory bread(block 9733) failed 06:43:57 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:57 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204052602000270f7f8", 0x16}], 0x800019, 0x0) 06:43:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:57 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a78) [ 732.987268][T32435] FAT-fs (loop4): Directory bread(block 9733) failed [ 733.017966][T32435] FAT-fs (loop4): Directory bread(block 9734) failed 06:43:57 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:57 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 733.033355][T32435] FAT-fs (loop4): Directory bread(block 9735) failed [ 733.040553][T32435] FAT-fs (loop4): Directory bread(block 9736) failed [ 733.055348][T32435] FAT-fs (loop4): Directory bread(block 9737) failed [ 733.093243][T32435] FAT-fs (loop4): Directory bread(block 9738) failed [ 733.121494][T32435] FAT-fs (loop4): Directory bread(block 9739) failed [ 733.133038][T32435] FAT-fs (loop4): Directory bread(block 9740) failed 06:43:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2a90) 06:43:57 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 733.174735][T32435] FAT-fs (loop4): Directory bread(block 9741) failed [ 733.187549][T32435] FAT-fs (loop4): Directory bread(block 9742) failed 06:43:58 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:58 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204003402000270f7f8", 0x16}], 0x800019, 0x0) 06:43:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2aa8) 06:43:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 733.969780][T32470] binder: 32461:32470 Acquire 1 refcount change on invalid ref 0 ret -22 [ 733.993896][T32470] binder: 32461:32470 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 734.027055][T32470] binder: 32461:32470 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:43:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ac0) [ 734.244199][T32463] FAT-fs (loop4): Directory bread(block 13312) failed [ 734.274260][T32463] FAT-fs (loop4): Directory bread(block 13313) failed 06:43:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 734.300889][T32463] FAT-fs (loop4): Directory bread(block 13314) failed [ 734.340905][T32463] FAT-fs (loop4): Directory bread(block 13315) failed 06:43:58 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 734.348100][T32463] FAT-fs (loop4): Directory bread(block 13316) failed [ 734.370902][T32463] FAT-fs (loop4): Directory bread(block 13317) failed [ 734.377759][T32463] FAT-fs (loop4): Directory bread(block 13318) failed 06:43:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 734.411112][T32463] FAT-fs (loop4): Directory bread(block 13319) failed [ 734.418447][T32463] FAT-fs (loop4): Directory bread(block 13320) failed [ 734.442388][T32463] FAT-fs (loop4): Directory bread(block 13321) failed 06:43:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ad8) 06:43:59 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:43:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204003b02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:43:59 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:43:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 734.988084][T32502] FAT-fs (loop4): Directory bread(block 15104) failed [ 735.008656][T32508] binder: 32500:32508 Acquire 1 refcount change on invalid ref 0 ret -22 [ 735.020572][T32502] FAT-fs (loop4): Directory bread(block 15105) failed 06:43:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2af0) [ 735.046703][T32508] binder: 32500:32508 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 735.076864][T32502] FAT-fs (loop4): Directory bread(block 15106) failed [ 735.089752][T32508] binder: 32500:32508 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 735.105404][T32502] FAT-fs (loop4): Directory bread(block 15107) failed [ 735.127467][T32502] FAT-fs (loop4): Directory bread(block 15108) failed [ 735.136284][T32502] FAT-fs (loop4): Directory bread(block 15109) failed [ 735.148636][T32502] FAT-fs (loop4): Directory bread(block 15110) failed [ 735.157425][T32502] FAT-fs (loop4): Directory bread(block 15111) failed [ 735.170085][T32502] FAT-fs (loop4): Directory bread(block 15112) failed [ 735.178871][T32502] FAT-fs (loop4): Directory bread(block 15113) failed 06:43:59 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:43:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204003c02000270f7f8", 0x16}], 0x800019, 0x0) 06:43:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b08) 06:44:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 735.640125][T32522] FAT-fs (loop4): Directory bread(block 15360) failed [ 735.673646][T32522] FAT-fs (loop4): Directory bread(block 15361) failed [ 735.698950][T32522] FAT-fs (loop4): Directory bread(block 15362) failed [ 735.710607][T32522] FAT-fs (loop4): Directory bread(block 15363) failed [ 735.721066][T32522] FAT-fs (loop4): Directory bread(block 15364) failed [ 735.727943][T32522] FAT-fs (loop4): Directory bread(block 15365) failed [ 735.744817][T32522] FAT-fs (loop4): Directory bread(block 15366) failed [ 735.762394][T32522] FAT-fs (loop4): Directory bread(block 15367) failed [ 735.770544][T32522] FAT-fs (loop4): Directory bread(block 15368) failed [ 735.777761][T32522] FAT-fs (loop4): Directory bread(block 15369) failed 06:44:00 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000200}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:00 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b20) 06:44:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204003d02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 735.980273][T32545] binder: 32539:32545 Acquire 1 refcount change on invalid ref 0 ret -22 [ 736.006894][T32545] binder: 32539:32545 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 736.021290][T32545] binder: 32539:32545 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 736.122958][T32543] FAT-fs (loop4): Directory bread(block 15616) failed [ 736.129863][T32543] FAT-fs (loop4): Directory bread(block 15617) failed 06:44:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b38) 06:44:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 736.164492][T32543] FAT-fs (loop4): Directory bread(block 15618) failed [ 736.180276][T32543] FAT-fs (loop4): Directory bread(block 15619) failed [ 736.187843][T32543] FAT-fs (loop4): Directory bread(block 15620) failed [ 736.194853][T32543] FAT-fs (loop4): Directory bread(block 15621) failed [ 736.201883][T32543] FAT-fs (loop4): Directory bread(block 15622) failed [ 736.208769][T32543] FAT-fs (loop4): Directory bread(block 15623) failed 06:44:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 736.238366][T32543] FAT-fs (loop4): Directory bread(block 15624) failed [ 736.257744][T32543] FAT-fs (loop4): Directory bread(block 15625) failed 06:44:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204003e02000270f7f8", 0x16}], 0x800019, 0x0) [ 736.569090][T32571] FAT-fs (loop4): Directory bread(block 15872) failed [ 736.586147][T32571] FAT-fs (loop4): Directory bread(block 15873) failed [ 736.606213][T32571] FAT-fs (loop4): Directory bread(block 15874) failed [ 736.616031][T32571] FAT-fs (loop4): Directory bread(block 15875) failed [ 736.627853][T32571] FAT-fs (loop4): Directory bread(block 15876) failed [ 736.637586][T32571] FAT-fs (loop4): Directory bread(block 15877) failed [ 736.649808][T32571] FAT-fs (loop4): Directory bread(block 15878) failed [ 736.659647][T32571] FAT-fs (loop4): Directory bread(block 15879) failed [ 736.673942][T32571] FAT-fs (loop4): Directory bread(block 15880) failed [ 736.684378][T32571] FAT-fs (loop4): Directory bread(block 15881) failed 06:44:01 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b50) 06:44:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204003f02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 737.001781][T32587] binder: 32581:32587 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 737.020251][T32580] FAT-fs (loop4): Directory bread(block 16128) failed 06:44:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 737.041919][T32580] FAT-fs (loop4): Directory bread(block 16129) failed [ 737.049136][T32587] binder: 32581:32587 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 737.069845][T32580] FAT-fs (loop4): Directory bread(block 16130) failed 06:44:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 737.098335][T32580] FAT-fs (loop4): Directory bread(block 16131) failed [ 737.111078][T32580] FAT-fs (loop4): Directory bread(block 16132) failed [ 737.131832][T32580] FAT-fs (loop4): Directory bread(block 16133) failed 06:44:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b68) 06:44:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 737.157475][T32580] FAT-fs (loop4): Directory bread(block 16134) failed [ 737.177335][T32580] FAT-fs (loop4): Directory bread(block 16135) failed [ 737.197085][T32580] FAT-fs (loop4): Directory bread(block 16136) failed 06:44:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 737.233025][T32580] FAT-fs (loop4): Directory bread(block 16137) failed 06:44:02 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204008102000270f7f8", 0x16}], 0x800019, 0x0) 06:44:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b80) 06:44:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 737.998339][T32617] binder: 32613:32617 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 738.031574][T32614] FAT-fs (loop4): Directory bread(block 33024) failed 06:44:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 738.045686][T32617] binder: 32613:32617 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 738.054082][T32614] FAT-fs (loop4): Directory bread(block 33025) failed [ 738.064106][T32614] FAT-fs (loop4): Directory bread(block 33026) failed [ 738.076425][T32614] FAT-fs (loop4): Directory bread(block 33027) failed [ 738.085663][T32614] FAT-fs (loop4): Directory bread(block 33028) failed [ 738.094555][T32614] FAT-fs (loop4): Directory bread(block 33029) failed [ 738.101961][T32614] FAT-fs (loop4): Directory bread(block 33030) failed [ 738.109215][T32614] FAT-fs (loop4): Directory bread(block 33031) failed [ 738.125224][T32614] FAT-fs (loop4): Directory bread(block 33032) failed [ 738.147358][T32614] FAT-fs (loop4): Directory bread(block 33033) failed 06:44:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204013400000270f7f8", 0x16}], 0x800019, 0x0) 06:44:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2b98) [ 738.404657][T32635] FAT-fs (loop4): bogus number of FAT structure [ 738.429649][T32635] FAT-fs (loop4): Can't find a valid FAT filesystem [ 738.503046][T32635] FAT-fs (loop4): bogus number of FAT structure [ 738.510895][T32635] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:03 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe0, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010202000270f7f8", 0x16}], 0x800019, 0x0) 06:44:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2bb0) 06:44:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 739.017843][T32655] binder: 32648:32655 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 739.027552][T32653] FAT-fs (loop4): Directory bread(block 513) failed [ 739.051947][T32653] FAT-fs (loop4): Directory bread(block 514) failed [ 739.055319][T32655] binder: 32648:32655 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 739.082741][T32653] FAT-fs (loop4): Directory bread(block 515) failed [ 739.117476][T32653] FAT-fs (loop4): Directory bread(block 516) failed 06:44:03 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 739.138673][T32653] FAT-fs (loop4): Directory bread(block 517) failed [ 739.156639][T32653] FAT-fs (loop4): Directory bread(block 518) failed [ 739.171372][T32653] FAT-fs (loop4): Directory bread(block 519) failed 06:44:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, @perf_config_ext={0x1000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2bc8) [ 739.203226][T32653] FAT-fs (loop4): Directory bread(block 520) failed [ 739.235802][T32653] FAT-fs (loop4): Directory bread(block 521) failed [ 739.261739][T32653] FAT-fs (loop4): Directory bread(block 522) failed 06:44:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010302000270f7f8", 0x16}], 0x800019, 0x0) [ 739.446994][T32673] FAT-fs (loop4): Directory bread(block 769) failed [ 739.458901][T32673] FAT-fs (loop4): Directory bread(block 770) failed [ 739.467378][T32673] FAT-fs (loop4): Directory bread(block 771) failed [ 739.479655][T32673] FAT-fs (loop4): Directory bread(block 772) failed [ 739.500406][T32673] FAT-fs (loop4): Directory bread(block 773) failed [ 739.523520][T32673] FAT-fs (loop4): Directory bread(block 774) failed [ 739.538222][T32673] FAT-fs (loop4): Directory bread(block 775) failed [ 739.546808][T32673] FAT-fs (loop4): Directory bread(block 776) failed [ 739.559030][T32673] FAT-fs (loop4): Directory bread(block 777) failed [ 739.567434][T32673] FAT-fs (loop4): Directory bread(block 778) failed 06:44:04 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000002, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2be0) 06:44:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010402000270f7f8", 0x16}], 0x800019, 0x0) 06:44:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000004, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 740.035614][T32688] binder: 32681:32688 ioctl c0306201 0 returned -14 [ 740.047457][T32688] binder: 32681:32688 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 740.058979][T32688] binder: 32681:32688 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 740.108018][T32683] FAT-fs (loop4): Directory bread(block 1025) failed [ 740.129003][T32683] FAT-fs (loop4): Directory bread(block 1026) failed 06:44:04 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 740.157718][T32683] FAT-fs (loop4): Directory bread(block 1027) failed [ 740.179565][T32683] FAT-fs (loop4): Directory bread(block 1028) failed 06:44:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2bf8) 06:44:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000204, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 740.217760][T32683] FAT-fs (loop4): Directory bread(block 1029) failed [ 740.254307][T32683] FAT-fs (loop4): Directory bread(block 1030) failed [ 740.275290][T32683] FAT-fs (loop4): Directory bread(block 1031) failed [ 740.283987][T32683] FAT-fs (loop4): Directory bread(block 1032) failed [ 740.292361][T32683] FAT-fs (loop4): Directory bread(block 1033) failed [ 740.299419][T32683] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010502000270f7f8", 0x16}], 0x800019, 0x0) 06:44:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000402, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 740.522058][T32710] FAT-fs (loop4): Directory bread(block 1281) failed [ 740.529176][T32710] FAT-fs (loop4): Directory bread(block 1282) failed [ 740.537336][T32710] FAT-fs (loop4): Directory bread(block 1283) failed [ 740.545181][T32710] FAT-fs (loop4): Directory bread(block 1284) failed [ 740.553167][T32710] FAT-fs (loop4): Directory bread(block 1285) failed [ 740.571914][T32710] FAT-fs (loop4): Directory bread(block 1286) failed [ 740.578673][T32710] FAT-fs (loop4): Directory bread(block 1287) failed [ 740.606118][T32710] FAT-fs (loop4): Directory bread(block 1288) failed [ 740.613894][T32710] FAT-fs (loop4): Directory bread(block 1289) failed [ 740.627630][T32710] FAT-fs (loop4): Directory bread(block 1290) failed 06:44:05 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2c10) 06:44:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000003f00, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010602000270f7f8", 0x16}], 0x800019, 0x0) 06:44:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000004000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 741.004902][T32727] binder: 32722:32727 ioctl c0306201 0 returned -14 [ 741.029772][T32727] binder: 32722:32727 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 741.045332][T32727] binder: 32722:32727 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 741.080188][T32724] FAT-fs (loop4): Directory bread(block 1537) failed [ 741.101320][T32724] FAT-fs (loop4): Directory bread(block 1538) failed [ 741.116883][T32724] FAT-fs (loop4): Directory bread(block 1539) failed 06:44:05 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 741.142904][T32724] FAT-fs (loop4): Directory bread(block 1540) failed [ 741.169053][T32724] FAT-fs (loop4): Directory bread(block 1541) failed 06:44:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000400000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2c28) [ 741.204315][T32724] FAT-fs (loop4): Directory bread(block 1542) failed [ 741.231379][T32724] FAT-fs (loop4): Directory bread(block 1543) failed [ 741.249064][T32724] FAT-fs (loop4): Directory bread(block 1544) failed [ 741.259401][T32724] FAT-fs (loop4): Directory bread(block 1545) failed [ 741.266866][T32724] FAT-fs (loop4): Directory bread(block 1546) failed 06:44:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000080ffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010702000270f7f8", 0x16}], 0x800019, 0x0) [ 741.511537][T32750] FAT-fs (loop4): Directory bread(block 1793) failed [ 741.521351][T32750] FAT-fs (loop4): Directory bread(block 1794) failed [ 741.528198][T32750] FAT-fs (loop4): Directory bread(block 1795) failed [ 741.546430][T32750] FAT-fs (loop4): Directory bread(block 1796) failed [ 741.554834][T32750] FAT-fs (loop4): Directory bread(block 1797) failed [ 741.567405][T32750] FAT-fs (loop4): Directory bread(block 1798) failed [ 741.575782][T32750] FAT-fs (loop4): Directory bread(block 1799) failed [ 741.588127][T32750] FAT-fs (loop4): Directory bread(block 1800) failed [ 741.596605][T32750] FAT-fs (loop4): Directory bread(block 1801) failed [ 741.608831][T32750] FAT-fs (loop4): Directory bread(block 1802) failed 06:44:06 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000001000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2c40) 06:44:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010802000270f7f8", 0x16}], 0x800019, 0x0) 06:44:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000002000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 741.996046][T32767] binder: 32759:32767 ioctl c0306201 0 returned -14 [ 742.015839][T32767] binder: 32759:32767 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 742.035971][T32767] binder: 32759:32767 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 742.068192][T32762] FAT-fs (loop4): Directory bread(block 2049) failed [ 742.082532][T32762] FAT-fs (loop4): Directory bread(block 2050) failed 06:44:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) 06:44:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000002040000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 742.109713][T32762] FAT-fs (loop4): Directory bread(block 2051) failed [ 742.130961][T32762] FAT-fs (loop4): Directory bread(block 2052) failed [ 742.150966][T32762] FAT-fs (loop4): Directory bread(block 2053) failed 06:44:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2c58) [ 742.171280][T32762] FAT-fs (loop4): Directory bread(block 2054) failed [ 742.184622][T32762] FAT-fs (loop4): Directory bread(block 2055) failed [ 742.200426][T32762] FAT-fs (loop4): Directory bread(block 2056) failed [ 742.214336][T32762] FAT-fs (loop4): Directory bread(block 2057) failed 06:44:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000004000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 742.225927][T32762] FAT-fs (loop4): Directory bread(block 2058) failed 06:44:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010902000270f7f8", 0x16}], 0x800019, 0x0) [ 742.509045][ T320] FAT-fs (loop4): Directory bread(block 2305) failed [ 742.523217][ T320] FAT-fs (loop4): Directory bread(block 2306) failed [ 742.530293][ T320] FAT-fs (loop4): Directory bread(block 2307) failed [ 742.544528][ T320] FAT-fs (loop4): Directory bread(block 2308) failed [ 742.568532][ T320] FAT-fs (loop4): Directory bread(block 2309) failed [ 742.594974][ T320] FAT-fs (loop4): Directory bread(block 2310) failed [ 742.617162][ T320] FAT-fs (loop4): Directory bread(block 2311) failed [ 742.628209][ T320] FAT-fs (loop4): Directory bread(block 2312) failed [ 742.638832][ T320] FAT-fs (loop4): Directory bread(block 2313) failed [ 742.649331][ T320] FAT-fs (loop4): Directory bread(block 2314) failed 06:44:07 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) 06:44:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100003f000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2c70) 06:44:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010a02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000040000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 742.982041][ T334] binder: 327:334 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 743.007256][ T334] binder: 327:334 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) [ 743.067440][ T331] FAT-fs (loop4): Directory bread(block 2561) failed [ 743.091525][ T331] FAT-fs (loop4): Directory bread(block 2562) failed [ 743.098295][ T331] FAT-fs (loop4): Directory bread(block 2563) failed 06:44:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2c88) 06:44:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000f5ffffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 743.145777][ T331] FAT-fs (loop4): Directory bread(block 2564) failed [ 743.170658][ T331] FAT-fs (loop4): Directory bread(block 2565) failed [ 743.197494][ T331] FAT-fs (loop4): Directory bread(block 2566) failed [ 743.225708][ T331] FAT-fs (loop4): Directory bread(block 2567) failed 06:44:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000ffff8000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 743.253081][ T331] FAT-fs (loop4): Directory bread(block 2568) failed [ 743.259881][ T331] FAT-fs (loop4): Directory bread(block 2569) failed [ 743.259906][ T331] FAT-fs (loop4): Directory bread(block 2570) failed 06:44:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010b02000270f7f8", 0x16}], 0x800019, 0x0) [ 743.523600][ T358] FAT-fs (loop4): Directory bread(block 2817) failed [ 743.530695][ T358] FAT-fs (loop4): Directory bread(block 2818) failed [ 743.538959][ T358] FAT-fs (loop4): Directory bread(block 2819) failed [ 743.546451][ T358] FAT-fs (loop4): Directory bread(block 2820) failed [ 743.555024][ T358] FAT-fs (loop4): Directory bread(block 2821) failed [ 743.563302][ T358] FAT-fs (loop4): Directory bread(block 2822) failed [ 743.570440][ T358] FAT-fs (loop4): Directory bread(block 2823) failed [ 743.578143][ T358] FAT-fs (loop4): Directory bread(block 2824) failed [ 743.585678][ T358] FAT-fs (loop4): Directory bread(block 2825) failed [ 743.593150][ T358] FAT-fs (loop4): Directory bread(block 2826) failed 06:44:08 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) 06:44:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ca0) 06:44:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010f02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000fffffff5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400000000000000, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 743.971827][ T369] FAT-fs (loop4): Directory bread(block 3841) failed [ 743.990939][ T369] FAT-fs (loop4): Directory bread(block 3842) failed [ 744.002814][ T369] FAT-fs (loop4): Directory bread(block 3843) failed [ 744.010520][ T369] FAT-fs (loop4): Directory bread(block 3844) failed [ 744.024880][ T375] binder: 367:375 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 744.034891][ T369] FAT-fs (loop4): Directory bread(block 3845) failed [ 744.045926][ T369] FAT-fs (loop4): Directory bread(block 3846) failed [ 744.058790][ T375] binder: 367:375 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 744.070246][ T369] FAT-fs (loop4): Directory bread(block 3847) failed [ 744.083315][ T369] FAT-fs (loop4): Directory bread(block 3848) failed 06:44:08 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) 06:44:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2cb8) [ 744.119021][ T369] FAT-fs (loop4): Directory bread(block 3849) failed [ 744.140122][ T369] FAT-fs (loop4): Directory bread(block 3850) failed 06:44:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204011202000270f7f8", 0x16}], 0x800019, 0x0) 06:44:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 744.437047][ T393] FAT-fs (loop4): Directory bread(block 4609) failed [ 744.482372][ T393] FAT-fs (loop4): Directory bread(block 4610) failed [ 744.501052][ T393] FAT-fs (loop4): Directory bread(block 4611) failed [ 744.513840][ T393] FAT-fs (loop4): Directory bread(block 4612) failed [ 744.520725][ T393] FAT-fs (loop4): Directory bread(block 4613) failed [ 744.527671][ T393] FAT-fs (loop4): Directory bread(block 4614) failed [ 744.534631][ T393] FAT-fs (loop4): Directory bread(block 4615) failed [ 744.541672][ T393] FAT-fs (loop4): Directory bread(block 4616) failed [ 744.548572][ T393] FAT-fs (loop4): Directory bread(block 4617) failed [ 744.555533][ T393] FAT-fs (loop4): Directory bread(block 4618) failed 06:44:09 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2cd0) 06:44:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204012302000270f7f8", 0x16}], 0x800019, 0x0) 06:44:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) 06:44:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 744.996355][ T412] binder: 406:412 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 745.008066][ T410] FAT-fs (loop4): Directory bread(block 8961) failed [ 745.030999][ T410] FAT-fs (loop4): Directory bread(block 8962) failed 06:44:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 745.039475][ T412] binder: 406:412 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 745.042404][ T410] FAT-fs (loop4): Directory bread(block 8963) failed [ 745.061044][ T410] FAT-fs (loop4): Directory bread(block 8964) failed [ 745.070319][ T410] FAT-fs (loop4): Directory bread(block 8965) failed [ 745.078114][ T410] FAT-fs (loop4): Directory bread(block 8966) failed [ 745.085680][ T410] FAT-fs (loop4): Directory bread(block 8967) failed [ 745.093038][ T410] FAT-fs (loop4): Directory bread(block 8968) failed [ 745.099945][ T410] FAT-fs (loop4): Directory bread(block 8969) failed [ 745.114540][ T410] FAT-fs (loop4): Directory bread(block 8970) failed 06:44:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ce8) 06:44:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204014802000270f7f8", 0x16}], 0x800019, 0x0) 06:44:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") 06:44:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 745.385294][ T429] FAT-fs (loop4): Directory bread(block 18433) failed [ 745.405608][ T429] FAT-fs (loop4): Directory bread(block 18434) failed [ 745.447730][ T429] FAT-fs (loop4): Directory bread(block 18435) failed [ 745.477168][ T429] FAT-fs (loop4): Directory bread(block 18436) failed [ 745.496607][ T429] FAT-fs (loop4): Directory bread(block 18437) failed [ 745.507376][ T429] FAT-fs (loop4): Directory bread(block 18438) failed [ 745.519716][ T429] FAT-fs (loop4): Directory bread(block 18439) failed [ 745.534632][ T429] FAT-fs (loop4): Directory bread(block 18440) failed [ 745.545822][ T429] FAT-fs (loop4): Directory bread(block 18441) failed [ 745.555591][ T429] FAT-fs (loop4): Directory bread(block 18442) failed 06:44:10 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d00) 06:44:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") 06:44:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204014c02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 745.907200][ T444] binder: 442:444 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 745.920677][ T447] FAT-fs (loop4): Directory bread(block 19457) failed [ 745.936216][ T444] binder: 442:444 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 745.942886][ T447] FAT-fs (loop4): Directory bread(block 19458) failed 06:44:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 745.970140][ T447] FAT-fs (loop4): Directory bread(block 19459) failed [ 745.983256][ T447] FAT-fs (loop4): Directory bread(block 19460) failed [ 745.991476][ T447] FAT-fs (loop4): Directory bread(block 19461) failed [ 745.999305][ T447] FAT-fs (loop4): Directory bread(block 19462) failed [ 746.006845][ T447] FAT-fs (loop4): Directory bread(block 19463) failed 06:44:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d18) [ 746.014100][ T447] FAT-fs (loop4): Directory bread(block 19464) failed [ 746.025877][ T447] FAT-fs (loop4): Directory bread(block 19465) failed [ 746.050953][ T447] FAT-fs (loop4): Directory bread(block 19466) failed 06:44:10 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12") 06:44:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204016802000270f7f8", 0x16}], 0x800019, 0x0) 06:44:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 746.337311][ T468] FAT-fs (loop4): Directory bread(block 26625) failed [ 746.352147][ T468] FAT-fs (loop4): Directory bread(block 26626) failed [ 746.386145][ T468] FAT-fs (loop4): Directory bread(block 26627) failed [ 746.404398][ T468] FAT-fs (loop4): Directory bread(block 26628) failed [ 746.422493][ T468] FAT-fs (loop4): Directory bread(block 26629) failed [ 746.429376][ T468] FAT-fs (loop4): Directory bread(block 26630) failed [ 746.436743][ T468] FAT-fs (loop4): Directory bread(block 26631) failed [ 746.444054][ T468] FAT-fs (loop4): Directory bread(block 26632) failed [ 746.451303][ T468] FAT-fs (loop4): Directory bread(block 26633) failed [ 746.458112][ T468] FAT-fs (loop4): Directory bread(block 26634) failed 06:44:11 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d30) 06:44:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") 06:44:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204016c02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 746.910092][ T486] binder: 481:486 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 746.920648][ T484] FAT-fs (loop4): Directory bread(block 27649) failed [ 746.949690][ T484] FAT-fs (loop4): Directory bread(block 27650) failed [ 746.958319][ T486] binder: 481:486 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 746.974226][ T484] FAT-fs (loop4): Directory bread(block 27651) failed 06:44:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x2040000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 747.000981][ T484] FAT-fs (loop4): Directory bread(block 27652) failed [ 747.038576][ T484] FAT-fs (loop4): Directory bread(block 27653) failed 06:44:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d48) [ 747.045682][ T484] FAT-fs (loop4): Directory bread(block 27654) failed [ 747.067226][ T484] FAT-fs (loop4): Directory bread(block 27655) failed [ 747.126710][ T484] FAT-fs (loop4): Directory bread(block 27656) failed [ 747.151232][ T484] FAT-fs (loop4): Directory bread(block 27657) failed 06:44:11 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") 06:44:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 747.209766][ T484] FAT-fs (loop4): Directory bread(block 27658) failed 06:44:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204016f02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 747.509398][ T512] FAT-fs (loop4): Directory bread(block 28417) failed [ 747.541690][ T512] FAT-fs (loop4): Directory bread(block 28418) failed [ 747.551278][ T512] FAT-fs (loop4): Directory bread(block 28419) failed [ 747.570439][ T512] FAT-fs (loop4): Directory bread(block 28420) failed [ 747.593572][ T512] FAT-fs (loop4): Directory bread(block 28421) failed [ 747.600668][ T512] FAT-fs (loop4): Directory bread(block 28422) failed [ 747.634493][ T512] FAT-fs (loop4): Directory bread(block 28423) failed [ 747.654600][ T512] FAT-fs (loop4): Directory bread(block 28424) failed [ 747.665784][ T512] FAT-fs (loop4): Directory bread(block 28425) failed [ 747.676638][ T512] FAT-fs (loop4): Directory bread(block 28426) failed 06:44:12 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d60) 06:44:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319b") 06:44:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204017002000270f7f8", 0x16}], 0x800019, 0x0) 06:44:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 747.923707][ T525] binder: 524:525 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 747.941545][ T525] binder: 524:525 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 747.999342][ T521] FAT-fs (loop4): Directory bread(block 28673) failed [ 748.013440][ T521] FAT-fs (loop4): Directory bread(block 28674) failed [ 748.023307][ T521] FAT-fs (loop4): Directory bread(block 28675) failed 06:44:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d78) [ 748.043289][ T521] FAT-fs (loop4): Directory bread(block 28676) failed [ 748.067803][ T521] FAT-fs (loop4): Directory bread(block 28677) failed 06:44:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") [ 748.104339][ T521] FAT-fs (loop4): Directory bread(block 28678) failed [ 748.150228][ T521] FAT-fs (loop4): Directory bread(block 28679) failed [ 748.179527][ T521] FAT-fs (loop4): Directory bread(block 28680) failed 06:44:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 748.199766][ T521] FAT-fs (loop4): Directory bread(block 28681) failed [ 748.211159][ T521] FAT-fs (loop4): Directory bread(block 28682) failed 06:44:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204017402000270f7f8", 0x16}], 0x800019, 0x0) 06:44:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") [ 748.532938][ T547] FAT-fs (loop4): Directory bread(block 29697) failed [ 748.548708][ T547] FAT-fs (loop4): Directory bread(block 29698) failed [ 748.573519][ T547] FAT-fs (loop4): Directory bread(block 29699) failed [ 748.596246][ T547] FAT-fs (loop4): Directory bread(block 29700) failed [ 748.609987][ T547] FAT-fs (loop4): Directory bread(block 29701) failed [ 748.619731][ T547] FAT-fs (loop4): Directory bread(block 29702) failed [ 748.635268][ T547] FAT-fs (loop4): Directory bread(block 29703) failed [ 748.647560][ T547] FAT-fs (loop4): Directory bread(block 29704) failed [ 748.658220][ T547] FAT-fs (loop4): Directory bread(block 29705) failed [ 748.668844][ T547] FAT-fs (loop4): Directory bread(block 29706) failed 06:44:13 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2d90) 06:44:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204017a02000270f7f8", 0x16}], 0x800019, 0x0) 06:44:13 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd0") 06:44:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 748.882916][ T559] binder: 557:559 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 748.891515][ T560] FAT-fs (loop4): Directory bread(block 31233) failed [ 748.898343][ T560] FAT-fs (loop4): Directory bread(block 31234) failed [ 748.899184][ T560] FAT-fs (loop4): Directory bread(block 31235) failed [ 748.899223][ T560] FAT-fs (loop4): Directory bread(block 31236) failed [ 748.899252][ T560] FAT-fs (loop4): Directory bread(block 31237) failed 06:44:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 748.899280][ T560] FAT-fs (loop4): Directory bread(block 31238) failed [ 748.899310][ T560] FAT-fs (loop4): Directory bread(block 31239) failed [ 748.947957][ T560] FAT-fs (loop4): Directory bread(block 31240) failed [ 748.961962][ T560] FAT-fs (loop4): Directory bread(block 31241) failed [ 748.969199][ T560] FAT-fs (loop4): Directory bread(block 31242) failed 06:44:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2da8) 06:44:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401b402000270f7f8", 0x16}], 0x800019, 0x0) 06:44:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 749.253089][ T579] FAT-fs (loop4): Directory bread(block 46081) failed [ 749.260114][ T579] FAT-fs (loop4): Directory bread(block 46082) failed [ 749.273282][ T579] FAT-fs (loop4): Directory bread(block 46083) failed [ 749.280330][ T579] FAT-fs (loop4): Directory bread(block 46084) failed [ 749.290322][ T579] FAT-fs (loop4): Directory bread(block 46085) failed 06:44:13 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 749.300380][ T579] FAT-fs (loop4): Directory bread(block 46086) failed [ 749.327415][ T579] FAT-fs (loop4): Directory bread(block 46087) failed [ 749.348159][ T579] FAT-fs (loop4): Directory bread(block 46088) failed [ 749.377355][ T579] FAT-fs (loop4): Directory bread(block 46089) failed [ 749.404758][ T579] FAT-fs (loop4): Directory bread(block 46090) failed 06:44:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2dc0) 06:44:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010003000270f7f8", 0x16}], 0x800019, 0x0) 06:44:14 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010005000270f7f8", 0x16}], 0x800019, 0x0) [ 749.878863][ T596] binder: 590:596 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204012605000270f7f8", 0x16}], 0x800019, 0x0) 06:44:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x204000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2dd8) 06:44:14 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 750.195882][ T614] FAT-fs (loop4): Directory bread(block 9729) failed 06:44:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 750.241375][ T614] FAT-fs (loop4): Directory bread(block 9730) failed [ 750.249964][ T614] FAT-fs (loop4): Directory bread(block 9731) failed [ 750.278348][ T614] FAT-fs (loop4): Directory bread(block 9732) failed 06:44:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010006000270f7f8", 0x16}], 0x800019, 0x0) [ 750.290299][ T614] FAT-fs (loop4): Directory bread(block 9733) failed [ 750.298534][ T614] FAT-fs (loop4): Directory bread(block 9734) failed [ 750.305950][ T614] FAT-fs (loop4): Directory bread(block 9735) failed [ 750.313446][ T614] FAT-fs (loop4): Directory bread(block 9736) failed [ 750.321381][ T614] FAT-fs (loop4): Directory bread(block 9737) failed [ 750.329160][ T614] FAT-fs (loop4): Directory bread(block 9738) failed 06:44:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2df0) 06:44:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:15 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x47fd907279}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010007000270f7f8", 0x16}], 0x800019, 0x0) 06:44:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e08) 06:44:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000a000270f7f8", 0x16}], 0x800019, 0x0) [ 750.853103][ T640] binder: 638:640 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:15 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e20) 06:44:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000f000270f7f8", 0x16}], 0x800019, 0x0) 06:44:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:16 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010014000270f7f8", 0x16}], 0x800019, 0x0) 06:44:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e38) 06:44:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 751.831609][ T675] binder: 674:675 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010020000270f7f8", 0x16}], 0x800019, 0x0) 06:44:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2988) 06:44:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e50) 06:44:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010028000270f7f8", 0x16}], 0x800019, 0x0) 06:44:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:17 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7d0000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e68) 06:44:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010428000270f7f8", 0x16}], 0x800019, 0x0) 06:44:17 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:44:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 752.841554][ T714] binder: 713:714 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 752.842527][ T717] FAT-fs (loop4): Directory bread(block 1025) failed [ 752.899167][ T717] FAT-fs (loop4): Directory bread(block 1026) failed [ 752.917125][ T717] FAT-fs (loop4): Directory bread(block 1027) failed [ 752.926120][ T717] FAT-fs (loop4): Directory bread(block 1028) failed [ 752.938651][ T717] FAT-fs (loop4): Directory bread(block 1029) failed [ 752.947634][ T717] FAT-fs (loop4): Directory bread(block 1030) failed [ 752.968976][ T717] FAT-fs (loop4): Directory bread(block 1031) failed [ 752.981983][ T717] FAT-fs (loop4): Directory bread(block 1032) failed [ 752.989602][ T717] FAT-fs (loop4): Directory bread(block 1033) failed [ 752.999222][ T717] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e80) 06:44:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401003f000270f7f8", 0x16}], 0x800019, 0x0) 06:44:17 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:44:18 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2e98) 06:44:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 753.813761][ T751] binder: 747:751 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010040000270f7f8", 0x16}], 0x800019, 0x0) 06:44:18 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000640000000000889078ac2314bbac141400040490780000000000000000000000ac2314aaac141400083400000000000000000000e000000001000000"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x200, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000500)={0x78, 0x0, 0x0, [{0x1, 0x188, 0xf, 0x100, '/dev/dlm_plock\x00'}, {0x0, 0x400, 0x1, 0x0, ','}, {0x0, 0x6, 0x3, 0x0, 'syz'}]}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000bc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) eventfd(0x8) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f00000005c0)) syz_genetlink_get_family_id$tipc2(0x0) socket$inet_udplite(0x2, 0x2, 0x88) 06:44:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x2040000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2eb0) 06:44:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401006f000270f7f8", 0x16}], 0x800019, 0x0) 06:44:18 executing program 3: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x9000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ec8) 06:44:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010070000270f7f8", 0x16}], 0x800019, 0x0) 06:44:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:19 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401048e000270f7f8", 0x16}], 0x800019, 0x0) 06:44:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 754.836521][ T789] binder: 788:789 ioctl c0306201 0 returned -14 [ 754.857998][ T789] binder: 788:789 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ee0) [ 755.006639][ T799] FAT-fs (loop4): Directory bread(block 1025) failed [ 755.035370][ T799] FAT-fs (loop4): Directory bread(block 1026) failed 06:44:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 755.063100][ T799] FAT-fs (loop4): Directory bread(block 1027) failed [ 755.072711][ T799] FAT-fs (loop4): Directory bread(block 1028) failed [ 755.087651][ T799] FAT-fs (loop4): Directory bread(block 1029) failed [ 755.097395][ T799] FAT-fs (loop4): Directory bread(block 1030) failed [ 755.104426][ T799] FAT-fs (loop4): Directory bread(block 1031) failed 06:44:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401048f000270f7f8", 0x16}], 0x800019, 0x0) [ 755.113743][ T799] FAT-fs (loop4): Directory bread(block 1032) failed [ 755.126389][ T799] FAT-fs (loop4): Directory bread(block 1033) failed [ 755.134864][ T799] FAT-fs (loop4): Directory bread(block 1034) failed [ 755.274395][ T813] FAT-fs (loop4): Directory bread(block 1025) failed [ 755.281690][ T813] FAT-fs (loop4): Directory bread(block 1026) failed [ 755.288576][ T813] FAT-fs (loop4): Directory bread(block 1027) failed [ 755.301629][ T813] FAT-fs (loop4): Directory bread(block 1028) failed [ 755.314842][ T813] FAT-fs (loop4): Directory bread(block 1029) failed [ 755.325583][ T813] FAT-fs (loop4): Directory bread(block 1030) failed [ 755.333474][ T813] FAT-fs (loop4): Directory bread(block 1031) failed [ 755.340476][ T813] FAT-fs (loop4): Directory bread(block 1032) failed [ 755.352209][ T813] FAT-fs (loop4): Directory bread(block 1033) failed [ 755.359157][ T813] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x8008700b, &(0x7f0000000000)) 06:44:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2ef8) 06:44:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010490000270f7f8", 0x16}], 0x800019, 0x0) [ 755.530642][ T823] FAT-fs (loop4): Directory bread(block 1025) failed [ 755.550183][ T823] FAT-fs (loop4): Directory bread(block 1026) failed [ 755.568342][ T823] FAT-fs (loop4): Directory bread(block 1027) failed [ 755.575310][ T823] FAT-fs (loop4): Directory bread(block 1028) failed [ 755.587960][ T823] FAT-fs (loop4): Directory bread(block 1029) failed [ 755.595273][ T823] FAT-fs (loop4): Directory bread(block 1030) failed 06:44:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 755.621320][ T823] FAT-fs (loop4): Directory bread(block 1031) failed [ 755.634995][ T823] FAT-fs (loop4): Directory bread(block 1032) failed [ 755.642360][ T823] FAT-fs (loop4): Directory bread(block 1033) failed [ 755.654624][ T823] FAT-fs (loop4): Directory bread(block 1034) failed [ 755.696251][ T827] binder: 826:827 ioctl c0306201 0 returned -14 [ 755.709644][ T827] binder: 826:827 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:20 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x7002, &(0x7f0000000000)) 06:44:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2f10) 06:44:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010491000270f7f8", 0x16}], 0x800019, 0x0) 06:44:20 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 755.866888][ T835] FAT-fs (loop4): Directory bread(block 1025) failed [ 755.901304][ T835] FAT-fs (loop4): Directory bread(block 1026) failed [ 755.908076][ T835] FAT-fs (loop4): Directory bread(block 1027) failed [ 755.938804][ T835] FAT-fs (loop4): Directory bread(block 1028) failed [ 755.953374][ T835] FAT-fs (loop4): Directory bread(block 1029) failed [ 755.970928][ T835] FAT-fs (loop4): Directory bread(block 1030) failed 06:44:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2f28) 06:44:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 755.980784][ T835] FAT-fs (loop4): Directory bread(block 1031) failed [ 755.990261][ T835] FAT-fs (loop4): Directory bread(block 1032) failed [ 755.997835][ T835] FAT-fs (loop4): Directory bread(block 1033) failed [ 756.019813][ T835] FAT-fs (loop4): Directory bread(block 1034) failed [ 756.104628][ T848] FAULT_INJECTION: forcing a failure. [ 756.104628][ T848] name failslab, interval 1, probability 0, space 0, times 0 [ 756.131249][ T848] CPU: 1 PID: 848 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 756.139107][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.149177][ T848] Call Trace: [ 756.152608][ T848] dump_stack+0x172/0x1f0 [ 756.156972][ T848] should_fail.cold+0xa/0x15 [ 756.161597][ T848] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 756.167438][ T848] ? ___might_sleep+0x163/0x280 [ 756.172316][ T848] __should_failslab+0x121/0x190 [ 756.177275][ T848] should_failslab+0x9/0x14 [ 756.181801][ T848] kmem_cache_alloc_trace+0x2d1/0x760 [ 756.187296][ T848] loop_add+0x51/0x8d0 [ 756.191379][ T848] ? idr_find+0x47/0x60 [ 756.195549][ T848] loop_control_ioctl+0x165/0x360 [ 756.200583][ T848] ? loop_add+0x8d0/0x8d0 [ 756.204921][ T848] ? loop_add+0x8d0/0x8d0 [ 756.209267][ T848] do_vfs_ioctl+0xd6e/0x1390 [ 756.213880][ T848] ? ioctl_preallocate+0x210/0x210 [ 756.219011][ T848] ? selinux_file_mprotect+0x620/0x620 [ 756.224471][ T848] ? __fget+0x381/0x550 [ 756.228644][ T848] ? ksys_dup3+0x3e0/0x3e0 [ 756.233158][ T848] ? tomoyo_file_ioctl+0x23/0x30 [ 756.238112][ T848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 756.244359][ T848] ? security_file_ioctl+0x93/0xc0 [ 756.249476][ T848] ksys_ioctl+0xab/0xd0 [ 756.253651][ T848] __x64_sys_ioctl+0x73/0xb0 [ 756.258252][ T848] do_syscall_64+0x103/0x610 [ 756.262855][ T848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.268750][ T848] RIP: 0033:0x458d99 [ 756.272647][ T848] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 756.292258][ T848] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.300738][ T848] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 756.308715][ T848] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 756.316694][ T848] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 756.324673][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 756.332663][ T848] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:20 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010492000270f7f8", 0x16}], 0x800019, 0x0) 06:44:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 756.478972][ T856] FAULT_INJECTION: forcing a failure. [ 756.478972][ T856] name failslab, interval 1, probability 0, space 0, times 0 [ 756.510977][ T856] CPU: 1 PID: 856 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 756.518834][ T856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.528993][ T856] Call Trace: [ 756.532312][ T856] dump_stack+0x172/0x1f0 [ 756.536661][ T856] should_fail.cold+0xa/0x15 [ 756.541286][ T856] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 756.547107][ T856] ? ___might_sleep+0x163/0x280 [ 756.551965][ T856] __should_failslab+0x121/0x190 [ 756.556914][ T856] should_failslab+0x9/0x14 [ 756.561430][ T856] kmem_cache_alloc_node_trace+0x270/0x720 [ 756.567254][ T856] __kmalloc_node+0x3d/0x70 [ 756.571850][ T856] blk_mq_alloc_tag_set+0x346/0xd40 [ 756.577079][ T856] loop_add+0x286/0x8d0 [ 756.581338][ T856] ? idr_find+0x47/0x60 [ 756.585515][ T856] loop_control_ioctl+0x165/0x360 [ 756.590628][ T856] ? loop_add+0x8d0/0x8d0 [ 756.594961][ T856] ? loop_add+0x8d0/0x8d0 [ 756.599293][ T856] do_vfs_ioctl+0xd6e/0x1390 [ 756.603906][ T856] ? ioctl_preallocate+0x210/0x210 [ 756.609057][ T856] ? selinux_file_mprotect+0x620/0x620 [ 756.614534][ T856] ? __fget+0x381/0x550 [ 756.618692][ T856] ? ksys_dup3+0x3e0/0x3e0 [ 756.623115][ T856] ? tomoyo_file_ioctl+0x23/0x30 [ 756.628067][ T856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 756.634308][ T856] ? security_file_ioctl+0x93/0xc0 [ 756.639420][ T856] ksys_ioctl+0xab/0xd0 [ 756.643577][ T856] __x64_sys_ioctl+0x73/0xb0 [ 756.648183][ T856] do_syscall_64+0x103/0x610 [ 756.652777][ T856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.658662][ T856] RIP: 0033:0x458d99 [ 756.662557][ T856] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 756.682165][ T856] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.690590][ T856] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 756.698573][ T856] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 756.706544][ T856] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 756.714514][ T856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 756.722481][ T856] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 756.756314][ T862] FAT-fs (loop4): Directory bread(block 1025) failed [ 756.763263][ T862] FAT-fs (loop4): Directory bread(block 1026) failed [ 756.770117][ T862] FAT-fs (loop4): Directory bread(block 1027) failed [ 756.777093][ T862] FAT-fs (loop4): Directory bread(block 1028) failed [ 756.784033][ T862] FAT-fs (loop4): Directory bread(block 1029) failed [ 756.802609][ T862] FAT-fs (loop4): Directory bread(block 1030) failed [ 756.811015][ T865] binder: 864:865 ioctl c0306201 0 returned -14 [ 756.831191][ T865] binder: 864:865 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 756.840228][ T862] FAT-fs (loop4): Directory bread(block 1031) failed 06:44:21 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2f40) [ 756.852419][ T862] FAT-fs (loop4): Directory bread(block 1032) failed [ 756.859325][ T862] FAT-fs (loop4): Directory bread(block 1033) failed [ 756.866345][ T862] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010493000270f7f8", 0x16}], 0x800019, 0x0) 06:44:21 executing program 3 (fault-call:2 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x204000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2f58) [ 757.046629][ T878] FAT-fs (loop4): Directory bread(block 1025) failed [ 757.058790][ T878] FAT-fs (loop4): Directory bread(block 1026) failed [ 757.071128][ T878] FAT-fs (loop4): Directory bread(block 1027) failed [ 757.112198][ T878] FAT-fs (loop4): Directory bread(block 1028) failed [ 757.120135][ T878] FAT-fs (loop4): Directory bread(block 1029) failed [ 757.127891][ T878] FAT-fs (loop4): Directory bread(block 1030) failed [ 757.135163][ T878] FAT-fs (loop4): Directory bread(block 1031) failed [ 757.143858][ T878] FAT-fs (loop4): Directory bread(block 1032) failed [ 757.151365][ T878] FAT-fs (loop4): Directory bread(block 1033) failed [ 757.158464][ T878] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010494000270f7f8", 0x16}], 0x800019, 0x0) 06:44:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 757.262868][ T886] FAULT_INJECTION: forcing a failure. [ 757.262868][ T886] name failslab, interval 1, probability 0, space 0, times 0 [ 757.291048][ T886] CPU: 0 PID: 886 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 757.298894][ T886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.308959][ T886] Call Trace: [ 757.312264][ T886] dump_stack+0x172/0x1f0 [ 757.316609][ T886] should_fail.cold+0xa/0x15 [ 757.321213][ T886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 757.327030][ T886] ? ___might_sleep+0x163/0x280 [ 757.331888][ T886] __should_failslab+0x121/0x190 [ 757.336825][ T886] should_failslab+0x9/0x14 [ 757.341333][ T886] kmem_cache_alloc_node_trace+0x270/0x720 [ 757.347160][ T886] ? kasan_unpoison_shadow+0x35/0x50 [ 757.352623][ T886] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 757.358437][ T886] __kmalloc_node+0x3d/0x70 [ 757.362944][ T886] blk_mq_alloc_tag_set+0x492/0xd40 [ 757.368158][ T886] loop_add+0x286/0x8d0 [ 757.372322][ T886] ? idr_find+0x47/0x60 [ 757.376490][ T886] loop_control_ioctl+0x165/0x360 [ 757.381529][ T886] ? loop_add+0x8d0/0x8d0 [ 757.385861][ T886] ? loop_add+0x8d0/0x8d0 [ 757.390190][ T886] do_vfs_ioctl+0xd6e/0x1390 [ 757.394785][ T886] ? ioctl_preallocate+0x210/0x210 [ 757.399893][ T886] ? selinux_file_mprotect+0x620/0x620 [ 757.405352][ T886] ? __fget+0x381/0x550 [ 757.409532][ T886] ? ksys_dup3+0x3e0/0x3e0 [ 757.413968][ T886] ? tomoyo_file_ioctl+0x23/0x30 [ 757.418927][ T886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 757.425229][ T886] ? security_file_ioctl+0x93/0xc0 [ 757.430361][ T886] ksys_ioctl+0xab/0xd0 [ 757.434571][ T886] __x64_sys_ioctl+0x73/0xb0 [ 757.439179][ T886] do_syscall_64+0x103/0x610 [ 757.443788][ T886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 757.449692][ T886] RIP: 0033:0x458d99 [ 757.453599][ T886] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 757.473210][ T886] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.481628][ T886] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 757.489610][ T886] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 757.497608][ T886] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 757.505607][ T886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 757.513593][ T886] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 757.573943][ T890] FAT-fs (loop4): Directory bread(block 1025) failed [ 757.587133][ T890] FAT-fs (loop4): Directory bread(block 1026) failed 06:44:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2f70) [ 757.639984][ T890] FAT-fs (loop4): Directory bread(block 1027) failed [ 757.683614][ T890] FAT-fs (loop4): Directory bread(block 1028) failed [ 757.708001][ T890] FAT-fs (loop4): Directory bread(block 1029) failed [ 757.720944][ T890] FAT-fs (loop4): Directory bread(block 1030) failed [ 757.727871][ T898] binder: 895:898 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 757.738622][ T890] FAT-fs (loop4): Directory bread(block 1031) failed [ 757.752418][ T890] FAT-fs (loop4): Directory bread(block 1032) failed [ 757.759311][ T890] FAT-fs (loop4): Directory bread(block 1033) failed [ 757.767570][ T890] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:22 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd0070000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:22 executing program 3 (fault-call:2 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010495000270f7f8", 0x16}], 0x800019, 0x0) 06:44:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2f88) 06:44:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 757.932435][ T908] FAULT_INJECTION: forcing a failure. [ 757.932435][ T908] name failslab, interval 1, probability 0, space 0, times 0 [ 757.967027][ T908] CPU: 1 PID: 908 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 757.974883][ T908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.974891][ T908] Call Trace: [ 757.974921][ T908] dump_stack+0x172/0x1f0 [ 757.974946][ T908] should_fail.cold+0xa/0x15 [ 757.974965][ T908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 757.974988][ T908] ? ___might_sleep+0x163/0x280 [ 757.975024][ T908] __should_failslab+0x121/0x190 [ 757.988373][ T908] should_failslab+0x9/0x14 [ 757.988392][ T908] kmem_cache_alloc_node_trace+0x270/0x720 [ 757.988409][ T908] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 757.988508][ T908] ? find_next_bit+0x107/0x130 [ 757.988532][ T908] blk_mq_init_tags+0x73/0x2c0 [ 757.997505][ T908] blk_mq_alloc_rq_map+0x88/0x200 [ 757.997526][ T908] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 757.997543][ T908] ? kasan_kmalloc+0x9/0x10 [ 757.997568][ T908] blk_mq_alloc_tag_set+0x78a/0xd40 [ 758.008236][ T908] loop_add+0x286/0x8d0 [ 758.008255][ T908] ? idr_find+0x47/0x60 [ 758.008274][ T908] loop_control_ioctl+0x165/0x360 [ 758.008294][ T908] ? loop_add+0x8d0/0x8d0 [ 758.017734][ T908] ? loop_add+0x8d0/0x8d0 [ 758.017756][ T908] do_vfs_ioctl+0xd6e/0x1390 [ 758.017777][ T908] ? ioctl_preallocate+0x210/0x210 [ 758.034590][ T908] ? selinux_file_mprotect+0x620/0x620 [ 758.034606][ T908] ? __fget+0x381/0x550 [ 758.034633][ T908] ? ksys_dup3+0x3e0/0x3e0 [ 758.044430][ T908] ? tomoyo_file_ioctl+0x23/0x30 [ 758.044448][ T908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.044465][ T908] ? security_file_ioctl+0x93/0xc0 [ 758.044494][ T908] ksys_ioctl+0xab/0xd0 [ 758.044513][ T908] __x64_sys_ioctl+0x73/0xb0 [ 758.044530][ T908] do_syscall_64+0x103/0x610 [ 758.044553][ T908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.054251][ T908] RIP: 0033:0x458d99 [ 758.054267][ T908] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.054274][ T908] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.054287][ T908] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 758.054295][ T908] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 758.054303][ T908] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 758.054311][ T908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 758.054319][ T908] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 758.215602][ T908] blk-mq: reduced tag depth (128 -> 64) [ 758.255691][ T910] FAT-fs (loop4): Directory bread(block 1025) failed [ 758.277706][ T910] FAT-fs (loop4): Directory bread(block 1026) failed [ 758.286292][ T910] FAT-fs (loop4): Directory bread(block 1027) failed [ 758.293997][ T910] FAT-fs (loop4): Directory bread(block 1028) failed 06:44:22 executing program 3 (fault-call:2 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 758.311887][ T910] FAT-fs (loop4): Directory bread(block 1029) failed [ 758.324404][ T910] FAT-fs (loop4): Directory bread(block 1030) failed [ 758.351172][ T910] FAT-fs (loop4): Directory bread(block 1031) failed 06:44:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010496000270f7f8", 0x16}], 0x800019, 0x0) [ 758.358425][ T910] FAT-fs (loop4): Directory bread(block 1032) failed [ 758.374404][ T910] FAT-fs (loop4): Directory bread(block 1033) failed [ 758.381311][ T910] FAT-fs (loop4): Directory bread(block 1034) failed 06:44:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2fa0) [ 758.582452][ T926] FAULT_INJECTION: forcing a failure. [ 758.582452][ T926] name failslab, interval 1, probability 0, space 0, times 0 [ 758.611603][ T929] binder: 928:929 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 758.621214][ T926] CPU: 0 PID: 926 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 758.629029][ T926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.639101][ T926] Call Trace: [ 758.642408][ T926] dump_stack+0x172/0x1f0 [ 758.646748][ T926] should_fail.cold+0xa/0x15 [ 758.651347][ T926] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 758.657164][ T926] ? ___might_sleep+0x163/0x280 [ 758.662019][ T926] __should_failslab+0x121/0x190 [ 758.666962][ T926] should_failslab+0x9/0x14 [ 758.671471][ T926] kmem_cache_alloc_node_trace+0x270/0x720 [ 758.677369][ T926] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 758.683071][ T926] __kmalloc_node+0x3d/0x70 [ 758.687628][ T926] sbitmap_init_node+0x29e/0x510 [ 758.692588][ T926] sbitmap_queue_init_node+0x40/0x710 [ 758.697962][ T926] ? find_next_bit+0x107/0x130 [ 758.702736][ T926] blk_mq_init_tags+0x119/0x2c0 [ 758.707592][ T926] blk_mq_alloc_rq_map+0x88/0x200 [ 758.712627][ T926] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 758.717835][ T926] ? kasan_kmalloc+0x9/0x10 [ 758.722345][ T926] blk_mq_alloc_tag_set+0x78a/0xd40 [ 758.727568][ T926] loop_add+0x286/0x8d0 [ 758.731989][ T926] ? idr_find+0x47/0x60 [ 758.736149][ T926] loop_control_ioctl+0x165/0x360 [ 758.741178][ T926] ? loop_add+0x8d0/0x8d0 [ 758.745526][ T926] ? loop_add+0x8d0/0x8d0 [ 758.749858][ T926] do_vfs_ioctl+0xd6e/0x1390 [ 758.754455][ T926] ? ioctl_preallocate+0x210/0x210 [ 758.759578][ T926] ? selinux_file_mprotect+0x620/0x620 [ 758.765040][ T926] ? __fget+0x381/0x550 [ 758.769202][ T926] ? ksys_dup3+0x3e0/0x3e0 [ 758.773633][ T926] ? tomoyo_file_ioctl+0x23/0x30 [ 758.779357][ T926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 758.785612][ T926] ? security_file_ioctl+0x93/0xc0 [ 758.790739][ T926] ksys_ioctl+0xab/0xd0 [ 758.794904][ T926] __x64_sys_ioctl+0x73/0xb0 [ 758.799585][ T926] do_syscall_64+0x103/0x610 [ 758.804186][ T926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.810105][ T926] RIP: 0033:0x458d99 [ 758.814003][ T926] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.833607][ T926] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.842112][ T926] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 758.850082][ T926] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 758.858054][ T926] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 758.866025][ T926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 758.873998][ T926] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 758.883945][ T926] blk-mq: reduced tag depth (128 -> 64) 06:44:23 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:23 executing program 3 (fault-call:2 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 758.996735][ T937] FAT-fs (loop4): Directory bread(block 1025) failed [ 759.003904][ T937] FAT-fs (loop4): Directory bread(block 1026) failed [ 759.014059][ T937] FAT-fs (loop4): Directory bread(block 1027) failed [ 759.041128][ T937] FAT-fs (loop4): Directory bread(block 1028) failed [ 759.059474][ T937] FAT-fs (loop4): Directory bread(block 1029) failed 06:44:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 759.085801][ T937] FAT-fs (loop4): Directory bread(block 1030) failed [ 759.106335][ T937] FAT-fs (loop4): Directory bread(block 1031) failed [ 759.117213][ T937] FAT-fs (loop4): Directory bread(block 1032) failed [ 759.135497][ T937] FAT-fs (loop4): Directory bread(block 1033) failed [ 759.143221][ T937] FAT-fs (loop4): Directory bread(block 1034) failed [ 759.168820][ T946] FAULT_INJECTION: forcing a failure. [ 759.168820][ T946] name failslab, interval 1, probability 0, space 0, times 0 06:44:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2fb8) [ 759.195996][ T946] CPU: 1 PID: 946 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 759.203860][ T946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.214365][ T946] Call Trace: [ 759.217678][ T946] dump_stack+0x172/0x1f0 [ 759.222029][ T946] should_fail.cold+0xa/0x15 [ 759.226639][ T946] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 759.232458][ T946] ? ___might_sleep+0x163/0x280 [ 759.237335][ T946] __should_failslab+0x121/0x190 [ 759.243222][ T946] should_failslab+0x9/0x14 [ 759.247734][ T946] kmem_cache_alloc_node_trace+0x270/0x720 [ 759.253549][ T946] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 759.259277][ T946] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 759.265041][ T946] ? find_next_bit+0x107/0x130 [ 759.269824][ T946] sbitmap_queue_init_node+0x29e/0x710 [ 759.275304][ T946] blk_mq_init_tags+0x119/0x2c0 [ 759.280161][ T946] blk_mq_alloc_rq_map+0x88/0x200 [ 759.285198][ T946] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 759.290409][ T946] ? kasan_kmalloc+0x9/0x10 [ 759.294938][ T946] blk_mq_alloc_tag_set+0x78a/0xd40 [ 759.300253][ T946] loop_add+0x286/0x8d0 [ 759.304426][ T946] ? idr_find+0x47/0x60 [ 759.308601][ T946] loop_control_ioctl+0x165/0x360 [ 759.313651][ T946] ? loop_add+0x8d0/0x8d0 [ 759.318037][ T946] ? loop_add+0x8d0/0x8d0 [ 759.322386][ T946] do_vfs_ioctl+0xd6e/0x1390 [ 759.327004][ T946] ? ioctl_preallocate+0x210/0x210 [ 759.332145][ T946] ? selinux_file_mprotect+0x620/0x620 [ 759.337624][ T946] ? __fget+0x381/0x550 [ 759.341808][ T946] ? ksys_dup3+0x3e0/0x3e0 [ 759.346255][ T946] ? tomoyo_file_ioctl+0x23/0x30 [ 759.351218][ T946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 759.357480][ T946] ? security_file_ioctl+0x93/0xc0 [ 759.362632][ T946] ksys_ioctl+0xab/0xd0 [ 759.366810][ T946] __x64_sys_ioctl+0x73/0xb0 [ 759.371434][ T946] do_syscall_64+0x103/0x610 [ 759.376056][ T946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.381963][ T946] RIP: 0033:0x458d99 06:44:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 759.385909][ T946] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 759.405528][ T946] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.414054][ T946] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 759.422067][ T946] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 759.430075][ T946] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 759.438070][ T946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 759.446085][ T946] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 759.461372][ T946] blk-mq: reduced tag depth (128 -> 64) 06:44:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002040100b4000270f7f8", 0x16}], 0x800019, 0x0) [ 759.504885][ T950] binder: 949:950 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:24 executing program 3 (fault-call:2 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2fd0) [ 759.768864][ T965] FAULT_INJECTION: forcing a failure. [ 759.768864][ T965] name failslab, interval 1, probability 0, space 0, times 0 [ 759.801715][ T965] CPU: 1 PID: 965 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 06:44:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 759.809566][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.819636][ T965] Call Trace: [ 759.822953][ T965] dump_stack+0x172/0x1f0 [ 759.827301][ T965] should_fail.cold+0xa/0x15 [ 759.831907][ T965] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 759.837730][ T965] ? ___might_sleep+0x163/0x280 [ 759.842599][ T965] __should_failslab+0x121/0x190 [ 759.847541][ T965] should_failslab+0x9/0x14 [ 759.852048][ T965] kmem_cache_alloc_node_trace+0x270/0x720 [ 759.857841][ T965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 759.864085][ T965] ? sbitmap_init_node+0x149/0x510 [ 759.869221][ T965] sbitmap_queue_init_node+0x29e/0x710 [ 759.874691][ T965] blk_mq_init_tags+0x17b/0x2c0 [ 759.879546][ T965] blk_mq_alloc_rq_map+0x88/0x200 [ 759.884575][ T965] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 759.889864][ T965] ? kasan_kmalloc+0x9/0x10 [ 759.894372][ T965] blk_mq_alloc_tag_set+0x78a/0xd40 [ 759.899585][ T965] loop_add+0x286/0x8d0 [ 759.903744][ T965] ? idr_find+0x47/0x60 [ 759.907905][ T965] loop_control_ioctl+0x165/0x360 [ 759.912934][ T965] ? loop_add+0x8d0/0x8d0 [ 759.917362][ T965] ? loop_add+0x8d0/0x8d0 [ 759.921695][ T965] do_vfs_ioctl+0xd6e/0x1390 [ 759.926286][ T965] ? ioctl_preallocate+0x210/0x210 [ 759.931427][ T965] ? selinux_file_mprotect+0x620/0x620 [ 759.936888][ T965] ? __fget+0x381/0x550 [ 759.941049][ T965] ? ksys_dup3+0x3e0/0x3e0 [ 759.945475][ T965] ? tomoyo_file_ioctl+0x23/0x30 [ 759.950419][ T965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 759.956660][ T965] ? security_file_ioctl+0x93/0xc0 [ 759.961883][ T965] ksys_ioctl+0xab/0xd0 [ 759.966044][ T965] __x64_sys_ioctl+0x73/0xb0 [ 759.970642][ T965] do_syscall_64+0x103/0x610 [ 759.975242][ T965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.981128][ T965] RIP: 0033:0x458d99 [ 759.985028][ T965] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 760.004633][ T965] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.013048][ T965] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 760.021016][ T965] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 760.028985][ T965] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 760.036968][ T965] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 760.045134][ T965] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 760.062978][ T965] blk-mq: reduced tag depth (128 -> 64) 06:44:24 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002040125fc000270f7f8", 0x16}], 0x800019, 0x0) 06:44:24 executing program 3 (fault-call:2 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x2fe8) 06:44:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 760.375811][ T987] FAULT_INJECTION: forcing a failure. [ 760.375811][ T987] name failslab, interval 1, probability 0, space 0, times 0 [ 760.375934][ T982] FAT-fs (loop4): Directory bread(block 9473) failed [ 760.402750][ T982] FAT-fs (loop4): Directory bread(block 9474) failed [ 760.410433][ T982] FAT-fs (loop4): Directory bread(block 9475) failed [ 760.419173][ T987] CPU: 0 PID: 987 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 760.423456][ T982] FAT-fs (loop4): Directory bread(block 9476) failed [ 760.427009][ T987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.427017][ T987] Call Trace: [ 760.427051][ T987] dump_stack+0x172/0x1f0 [ 760.427076][ T987] should_fail.cold+0xa/0x15 [ 760.427100][ T987] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 760.436816][ T982] FAT-fs (loop4): Directory bread(block 9477) failed [ 760.443882][ T987] ? ___might_sleep+0x163/0x280 [ 760.443901][ T987] __should_failslab+0x121/0x190 [ 760.443918][ T987] should_failslab+0x9/0x14 [ 760.443933][ T987] kmem_cache_alloc_node_trace+0x270/0x720 [ 760.443955][ T987] __kmalloc_node+0x3d/0x70 [ 760.443972][ T987] blk_mq_alloc_rq_map+0xb9/0x200 [ 760.443988][ T987] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 760.444001][ T987] ? kasan_kmalloc+0x9/0x10 [ 760.444018][ T987] blk_mq_alloc_tag_set+0x78a/0xd40 [ 760.444045][ T987] loop_add+0x286/0x8d0 [ 760.444070][ T987] ? idr_find+0x47/0x60 [ 760.450294][ T982] FAT-fs (loop4): Directory bread(block 9478) failed [ 760.451696][ T987] loop_control_ioctl+0x165/0x360 [ 760.451713][ T987] ? loop_add+0x8d0/0x8d0 [ 760.451730][ T987] ? loop_add+0x8d0/0x8d0 [ 760.451750][ T987] do_vfs_ioctl+0xd6e/0x1390 [ 760.451769][ T987] ? ioctl_preallocate+0x210/0x210 [ 760.451782][ T987] ? selinux_file_mprotect+0x620/0x620 [ 760.451795][ T987] ? __fget+0x381/0x550 [ 760.451816][ T987] ? ksys_dup3+0x3e0/0x3e0 [ 760.451837][ T987] ? tomoyo_file_ioctl+0x23/0x30 [ 760.459311][ T982] FAT-fs (loop4): Directory bread(block 9479) failed [ 760.462234][ T987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 760.462252][ T987] ? security_file_ioctl+0x93/0xc0 [ 760.462270][ T987] ksys_ioctl+0xab/0xd0 [ 760.462288][ T987] __x64_sys_ioctl+0x73/0xb0 [ 760.462305][ T987] do_syscall_64+0x103/0x610 [ 760.462324][ T987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 760.462336][ T987] RIP: 0033:0x458d99 [ 760.462352][ T987] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 760.462368][ T987] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.475633][ T982] FAT-fs (loop4): Directory bread(block 9480) failed [ 760.478844][ T987] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 760.478854][ T987] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 760.478862][ T987] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 760.478870][ T987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 760.478879][ T987] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 760.589304][ T987] blk-mq: reduced tag depth (128 -> 64) [ 760.601320][ T982] FAT-fs (loop4): Directory bread(block 9481) failed [ 760.638772][ T982] FAT-fs (loop4): Directory bread(block 9482) failed [ 760.642187][ T990] binder: 988:990 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010003000270f7f8", 0x16}], 0x800019, 0x0) 06:44:25 executing program 3 (fault-call:2 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3000) [ 761.007259][ T1005] FAULT_INJECTION: forcing a failure. [ 761.007259][ T1005] name failslab, interval 1, probability 0, space 0, times 0 [ 761.040665][ T1005] CPU: 0 PID: 1005 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 761.048608][ T1005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.058669][ T1005] Call Trace: [ 761.061976][ T1005] dump_stack+0x172/0x1f0 [ 761.067197][ T1005] should_fail.cold+0xa/0x15 [ 761.073355][ T1005] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 761.079172][ T1005] ? ___might_sleep+0x163/0x280 [ 761.084046][ T1005] __should_failslab+0x121/0x190 [ 761.088986][ T1005] should_failslab+0x9/0x14 [ 761.093505][ T1005] kmem_cache_alloc_node_trace+0x270/0x720 [ 761.099316][ T1005] ? kasan_unpoison_shadow+0x35/0x50 [ 761.104609][ T1005] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 761.111903][ T1005] __kmalloc_node+0x3d/0x70 [ 761.116416][ T1005] blk_mq_alloc_rq_map+0xfa/0x200 [ 761.121448][ T1005] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 761.126653][ T1005] ? kasan_kmalloc+0x9/0x10 [ 761.131154][ T1005] blk_mq_alloc_tag_set+0x78a/0xd40 [ 761.136358][ T1005] loop_add+0x286/0x8d0 [ 761.140520][ T1005] ? idr_find+0x47/0x60 [ 761.144680][ T1005] loop_control_ioctl+0x165/0x360 [ 761.149699][ T1005] ? loop_add+0x8d0/0x8d0 [ 761.154031][ T1005] ? loop_add+0x8d0/0x8d0 [ 761.158359][ T1005] do_vfs_ioctl+0xd6e/0x1390 [ 761.162957][ T1005] ? ioctl_preallocate+0x210/0x210 [ 761.168063][ T1005] ? selinux_file_mprotect+0x620/0x620 [ 761.173556][ T1005] ? __fget+0x381/0x550 [ 761.177720][ T1005] ? ksys_dup3+0x3e0/0x3e0 [ 761.182143][ T1005] ? tomoyo_file_ioctl+0x23/0x30 [ 761.187186][ T1005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 761.193426][ T1005] ? security_file_ioctl+0x93/0xc0 [ 761.198541][ T1005] ksys_ioctl+0xab/0xd0 [ 761.202699][ T1005] __x64_sys_ioctl+0x73/0xb0 [ 761.207288][ T1005] do_syscall_64+0x103/0x610 [ 761.211905][ T1005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 761.217804][ T1005] RIP: 0033:0x458d99 [ 761.221700][ T1005] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 761.241873][ T1005] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.250286][ T1005] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 761.258252][ T1005] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 761.266216][ T1005] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 761.274180][ T1005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 761.282143][ T1005] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 761.327948][ T1005] blk-mq: reduced tag depth (128 -> 64) 06:44:25 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010004000270f7f8", 0x16}], 0x800019, 0x0) 06:44:25 executing program 3 (fault-call:2 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 761.531271][ T1019] binder: 1017:1019 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3018) [ 761.648003][ T1028] FAULT_INJECTION: forcing a failure. [ 761.648003][ T1028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:44:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x2040000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 761.711092][ T1028] CPU: 0 PID: 1028 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 761.719035][ T1028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.729110][ T1028] Call Trace: [ 761.732452][ T1028] dump_stack+0x172/0x1f0 [ 761.732478][ T1028] should_fail.cold+0xa/0x15 [ 761.741872][ T1028] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 761.741891][ T1028] ? ___might_sleep+0x163/0x280 [ 761.741917][ T1028] should_fail_alloc_page+0x50/0x60 [ 761.741933][ T1028] __alloc_pages_nodemask+0x1a1/0x7e0 [ 761.741955][ T1028] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 761.741971][ T1028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 06:44:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010005000270f7f8", 0x16}], 0x800019, 0x0) 06:44:26 executing program 3 (fault-call:2 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 761.741988][ T1028] ? find_next_bit+0x107/0x130 [ 761.742085][ T1028] ? __cpu_to_node+0x7e/0xa0 [ 761.742105][ T1028] ? blk_mq_hw_queue_to_node+0xf1/0x140 [ 761.742126][ T1028] blk_mq_alloc_rqs+0x223/0x7f0 [ 761.742147][ T1028] ? __kmalloc_node+0x4e/0x70 [ 761.742172][ T1028] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 761.742187][ T1028] ? kasan_kmalloc+0x9/0x10 [ 761.742206][ T1028] blk_mq_alloc_tag_set+0x78a/0xd40 [ 761.742235][ T1028] loop_add+0x286/0x8d0 06:44:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3030) [ 761.742252][ T1028] ? idr_find+0x47/0x60 [ 761.742273][ T1028] loop_control_ioctl+0x165/0x360 [ 761.742289][ T1028] ? loop_add+0x8d0/0x8d0 [ 761.742310][ T1028] ? loop_add+0x8d0/0x8d0 [ 761.742329][ T1028] do_vfs_ioctl+0xd6e/0x1390 [ 761.742350][ T1028] ? ioctl_preallocate+0x210/0x210 [ 761.742365][ T1028] ? selinux_file_mprotect+0x620/0x620 [ 761.742379][ T1028] ? __fget+0x381/0x550 [ 761.742401][ T1028] ? ksys_dup3+0x3e0/0x3e0 [ 761.742427][ T1028] ? tomoyo_file_ioctl+0x23/0x30 [ 761.742443][ T1028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 761.742460][ T1028] ? security_file_ioctl+0x93/0xc0 [ 761.742479][ T1028] ksys_ioctl+0xab/0xd0 [ 761.742517][ T1028] __x64_sys_ioctl+0x73/0xb0 [ 761.742537][ T1028] do_syscall_64+0x103/0x610 [ 761.742557][ T1028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 761.742570][ T1028] RIP: 0033:0x458d99 [ 761.742586][ T1028] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 761.742595][ T1028] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.742610][ T1028] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 761.742619][ T1028] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 761.742629][ T1028] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 761.742638][ T1028] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 761.742647][ T1028] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 762.071087][ T1052] FAULT_INJECTION: forcing a failure. [ 762.071087][ T1052] name failslab, interval 1, probability 0, space 0, times 0 [ 762.071108][ T1052] CPU: 0 PID: 1052 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 762.071117][ T1052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.071121][ T1052] Call Trace: [ 762.071149][ T1052] dump_stack+0x172/0x1f0 [ 762.071174][ T1052] should_fail.cold+0xa/0x15 [ 762.071195][ T1052] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 762.071218][ T1052] ? ___might_sleep+0x163/0x280 [ 762.071242][ T1052] __should_failslab+0x121/0x190 [ 762.071260][ T1052] should_failslab+0x9/0x14 [ 762.071282][ T1052] kmem_cache_alloc_node+0x264/0x710 [ 762.071300][ T1052] ? debug_mutex_init+0x2d/0x60 [ 762.071318][ T1052] ? __mutex_init+0xef/0x130 [ 762.071416][ T1052] blk_alloc_queue_node+0x32/0x760 [ 762.071441][ T1052] blk_mq_init_queue+0x4a/0xb0 [ 762.071461][ T1052] loop_add+0x2dd/0x8d0 [ 762.071479][ T1052] ? idr_find+0x47/0x60 [ 762.071519][ T1052] loop_control_ioctl+0x165/0x360 [ 762.071537][ T1052] ? loop_add+0x8d0/0x8d0 [ 762.071558][ T1052] ? loop_add+0x8d0/0x8d0 [ 762.071578][ T1052] do_vfs_ioctl+0xd6e/0x1390 [ 762.071599][ T1052] ? ioctl_preallocate+0x210/0x210 [ 762.071616][ T1052] ? selinux_file_mprotect+0x620/0x620 [ 762.071632][ T1052] ? __fget+0x381/0x550 [ 762.071655][ T1052] ? ksys_dup3+0x3e0/0x3e0 [ 762.071689][ T1052] ? tomoyo_file_ioctl+0x23/0x30 [ 762.071706][ T1052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 762.071725][ T1052] ? security_file_ioctl+0x93/0xc0 [ 762.071744][ T1052] ksys_ioctl+0xab/0xd0 [ 762.071764][ T1052] __x64_sys_ioctl+0x73/0xb0 [ 762.071783][ T1052] do_syscall_64+0x103/0x610 [ 762.071804][ T1052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.071819][ T1052] RIP: 0033:0x458d99 [ 762.071838][ T1052] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 762.071848][ T1052] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.071867][ T1052] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 762.071877][ T1052] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 762.071888][ T1052] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 762.071899][ T1052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 762.071909][ T1052] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:27 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:27 executing program 3 (fault-call:2 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010006000270f7f8", 0x16}], 0x800019, 0x0) 06:44:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 762.571970][ T1071] FAULT_INJECTION: forcing a failure. [ 762.571970][ T1071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.585224][ T1071] CPU: 0 PID: 1071 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 762.593134][ T1071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.603210][ T1071] Call Trace: [ 762.603244][ T1071] dump_stack+0x172/0x1f0 [ 762.603268][ T1071] should_fail.cold+0xa/0x15 [ 762.603289][ T1071] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 762.603308][ T1071] ? __lock_acquire+0x548/0x3fb0 [ 762.603331][ T1071] should_fail_alloc_page+0x50/0x60 [ 762.603348][ T1071] __alloc_pages_nodemask+0x1a1/0x7e0 [ 762.603370][ T1071] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 762.603383][ T1071] ? find_held_lock+0x35/0x130 [ 762.603406][ T1071] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 762.603439][ T1071] cache_grow_begin+0x9c/0x860 [ 762.657927][ T1071] ? blk_alloc_queue_node+0x32/0x760 [ 762.663246][ T1071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 762.669520][ T1071] kmem_cache_alloc_node+0x645/0x710 [ 762.674823][ T1071] ? debug_mutex_init+0x2d/0x60 [ 762.679717][ T1071] blk_alloc_queue_node+0x32/0x760 [ 762.684955][ T1071] blk_mq_init_queue+0x4a/0xb0 [ 762.689741][ T1071] loop_add+0x2dd/0x8d0 [ 762.693916][ T1071] ? idr_find+0x47/0x60 [ 762.698100][ T1071] loop_control_ioctl+0x165/0x360 [ 762.703147][ T1071] ? loop_add+0x8d0/0x8d0 [ 762.707506][ T1071] ? loop_add+0x8d0/0x8d0 [ 762.711873][ T1071] do_vfs_ioctl+0xd6e/0x1390 [ 762.716482][ T1071] ? ioctl_preallocate+0x210/0x210 [ 762.721622][ T1071] ? selinux_file_mprotect+0x620/0x620 [ 762.727084][ T1071] ? __fget+0x381/0x550 [ 762.731250][ T1071] ? ksys_dup3+0x3e0/0x3e0 [ 762.735683][ T1071] ? tomoyo_file_ioctl+0x23/0x30 [ 762.740635][ T1071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 762.746893][ T1071] ? security_file_ioctl+0x93/0xc0 [ 762.752025][ T1071] ksys_ioctl+0xab/0xd0 [ 762.756219][ T1071] __x64_sys_ioctl+0x73/0xb0 [ 762.760831][ T1071] do_syscall_64+0x103/0x610 [ 762.765434][ T1071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.771329][ T1071] RIP: 0033:0x458d99 [ 762.775231][ T1071] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 762.794841][ T1071] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.803292][ T1071] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 762.811277][ T1071] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:44:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3048) [ 762.819264][ T1071] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 762.827266][ T1071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 762.835257][ T1071] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 762.847710][ T1073] binder: 1067:1073 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010007000270f7f8", 0x16}], 0x800019, 0x0) 06:44:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000a000270f7f8", 0x16}], 0x800019, 0x0) 06:44:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3060) 06:44:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:28 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:28 executing program 3 (fault-call:2 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000f000270f7f8", 0x16}], 0x800019, 0x0) 06:44:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3078) 06:44:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 763.578640][ T1110] binder: 1103:1110 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 763.699553][ T1114] FAULT_INJECTION: forcing a failure. [ 763.699553][ T1114] name failslab, interval 1, probability 0, space 0, times 0 [ 763.731367][ T1114] CPU: 0 PID: 1114 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 763.739289][ T1114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.749351][ T1114] Call Trace: [ 763.752656][ T1114] dump_stack+0x172/0x1f0 [ 763.756996][ T1114] should_fail.cold+0xa/0x15 [ 763.761596][ T1114] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 763.767415][ T1114] ? ___might_sleep+0x163/0x280 [ 763.772277][ T1114] __should_failslab+0x121/0x190 [ 763.777238][ T1114] should_failslab+0x9/0x14 [ 763.781749][ T1114] kmem_cache_alloc+0x2b2/0x6f0 [ 763.786604][ T1114] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 763.792494][ T1114] ? mempool_free+0x380/0x380 [ 763.797188][ T1114] mempool_alloc_slab+0x47/0x60 [ 763.802086][ T1114] ? mempool_alloc+0x380/0x380 [ 763.806865][ T1114] mempool_init_node+0x2e1/0x560 [ 763.811851][ T1114] ? mempool_alloc+0x380/0x380 [ 763.816631][ T1114] ? mempool_free+0x380/0x380 [ 763.821326][ T1114] mempool_init+0x3d/0x50 [ 763.825748][ T1114] bioset_init+0x33a/0x700 [ 763.830192][ T1114] blk_alloc_queue_node+0x137/0x760 [ 763.835404][ T1114] blk_mq_init_queue+0x4a/0xb0 [ 763.840175][ T1114] loop_add+0x2dd/0x8d0 [ 763.844457][ T1114] ? idr_find+0x47/0x60 [ 763.848642][ T1114] loop_control_ioctl+0x165/0x360 [ 763.853848][ T1114] ? loop_add+0x8d0/0x8d0 [ 763.858197][ T1114] ? loop_add+0x8d0/0x8d0 [ 763.862542][ T1114] do_vfs_ioctl+0xd6e/0x1390 [ 763.867144][ T1114] ? ioctl_preallocate+0x210/0x210 [ 763.872262][ T1114] ? selinux_file_mprotect+0x620/0x620 [ 763.877726][ T1114] ? __fget+0x381/0x550 [ 763.881896][ T1114] ? ksys_dup3+0x3e0/0x3e0 [ 763.886324][ T1114] ? tomoyo_file_ioctl+0x23/0x30 [ 763.891292][ T1114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.897542][ T1114] ? security_file_ioctl+0x93/0xc0 [ 763.902666][ T1114] ksys_ioctl+0xab/0xd0 [ 763.906841][ T1114] __x64_sys_ioctl+0x73/0xb0 [ 763.911449][ T1114] do_syscall_64+0x103/0x610 [ 763.916091][ T1114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.921984][ T1114] RIP: 0033:0x458d99 [ 763.925883][ T1114] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 763.945515][ T1114] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.953987][ T1114] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 763.961966][ T1114] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 763.969974][ T1114] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 763.977978][ T1114] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 763.985977][ T1114] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:28 executing program 3 (fault-call:2 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010010000270f7f8", 0x16}], 0x800019, 0x0) 06:44:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3090) 06:44:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 764.168880][ T1125] FAULT_INJECTION: forcing a failure. [ 764.168880][ T1125] name failslab, interval 1, probability 0, space 0, times 0 [ 764.199592][ T1125] CPU: 0 PID: 1125 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 764.207570][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.207578][ T1125] Call Trace: [ 764.207611][ T1125] dump_stack+0x172/0x1f0 [ 764.207638][ T1125] should_fail.cold+0xa/0x15 [ 764.230254][ T1125] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 764.230275][ T1125] ? ___might_sleep+0x163/0x280 [ 764.230295][ T1125] __should_failslab+0x121/0x190 [ 764.230309][ T1125] should_failslab+0x9/0x14 [ 764.230333][ T1125] kmem_cache_alloc+0x2b2/0x6f0 [ 764.255241][ T1125] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 764.255266][ T1125] ? mempool_free+0x380/0x380 [ 764.255285][ T1125] mempool_alloc_slab+0x47/0x60 [ 764.270611][ T1125] ? mempool_alloc+0x380/0x380 [ 764.270625][ T1125] mempool_init_node+0x2e1/0x560 [ 764.270643][ T1125] ? mempool_alloc+0x380/0x380 [ 764.285115][ T1125] ? mempool_free+0x380/0x380 [ 764.285129][ T1125] mempool_init+0x3d/0x50 [ 764.285151][ T1125] bioset_init+0x33a/0x700 [ 764.285172][ T1125] blk_alloc_queue_node+0x137/0x760 [ 764.285193][ T1125] blk_mq_init_queue+0x4a/0xb0 [ 764.285209][ T1125] loop_add+0x2dd/0x8d0 [ 764.312967][ T1125] ? idr_find+0x47/0x60 [ 764.317153][ T1125] loop_control_ioctl+0x165/0x360 [ 764.322207][ T1125] ? loop_add+0x8d0/0x8d0 [ 764.326574][ T1125] ? loop_add+0x8d0/0x8d0 [ 764.330930][ T1125] do_vfs_ioctl+0xd6e/0x1390 [ 764.335560][ T1125] ? ioctl_preallocate+0x210/0x210 [ 764.340699][ T1125] ? selinux_file_mprotect+0x620/0x620 [ 764.346178][ T1125] ? __fget+0x381/0x550 [ 764.350369][ T1125] ? ksys_dup3+0x3e0/0x3e0 [ 764.354816][ T1125] ? tomoyo_file_ioctl+0x23/0x30 [ 764.359787][ T1125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 764.366058][ T1125] ? security_file_ioctl+0x93/0xc0 [ 764.371206][ T1125] ksys_ioctl+0xab/0xd0 [ 764.375390][ T1125] __x64_sys_ioctl+0x73/0xb0 [ 764.380008][ T1125] do_syscall_64+0x103/0x610 [ 764.384639][ T1125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.390556][ T1125] RIP: 0033:0x458d99 [ 764.394468][ T1125] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:44:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 764.414098][ T1125] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.422539][ T1125] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 764.430539][ T1125] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 764.438541][ T1125] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.446536][ T1125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 764.454533][ T1125] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 764.516646][ T1133] binder: 1131:1133 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:29 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:29 executing program 3 (fault-call:2 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010014000270f7f8", 0x16}], 0x800019, 0x0) 06:44:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x30a8) [ 764.656881][ T1142] FAULT_INJECTION: forcing a failure. [ 764.656881][ T1142] name failslab, interval 1, probability 0, space 0, times 0 [ 764.701527][ T1142] CPU: 1 PID: 1142 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 764.709467][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.709475][ T1142] Call Trace: [ 764.709514][ T1142] dump_stack+0x172/0x1f0 [ 764.709550][ T1142] should_fail.cold+0xa/0x15 [ 764.731831][ T1142] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 764.737670][ T1142] ? ___might_sleep+0x163/0x280 [ 764.742641][ T1142] __should_failslab+0x121/0x190 [ 764.747597][ T1142] should_failslab+0x9/0x14 [ 764.752112][ T1142] kmem_cache_alloc+0x2b2/0x6f0 [ 764.757005][ T1142] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 764.763372][ T1142] ? __phys_addr+0xa4/0x120 [ 764.767896][ T1142] ? mempool_init+0x3d/0x50 [ 764.772418][ T1142] mempool_alloc_slab+0x47/0x60 [ 764.777285][ T1142] ? mempool_alloc+0x380/0x380 [ 764.782062][ T1142] mempool_init_node+0x2e1/0x560 [ 764.787026][ T1142] ? mempool_alloc+0x380/0x380 [ 764.791805][ T1142] ? mempool_free+0x380/0x380 [ 764.796503][ T1142] mempool_init+0x3d/0x50 [ 764.800854][ T1142] bioset_init+0x33a/0x700 [ 764.805293][ T1142] blk_alloc_queue_node+0x137/0x760 [ 764.810524][ T1142] blk_mq_init_queue+0x4a/0xb0 [ 764.815313][ T1142] loop_add+0x2dd/0x8d0 [ 764.819830][ T1142] ? idr_find+0x47/0x60 [ 764.824003][ T1142] loop_control_ioctl+0x165/0x360 [ 764.829051][ T1142] ? loop_add+0x8d0/0x8d0 [ 764.833400][ T1142] ? loop_add+0x8d0/0x8d0 [ 764.837751][ T1142] do_vfs_ioctl+0xd6e/0x1390 [ 764.842380][ T1142] ? ioctl_preallocate+0x210/0x210 [ 764.847518][ T1142] ? selinux_file_mprotect+0x620/0x620 [ 764.852996][ T1142] ? __fget+0x381/0x550 [ 764.857181][ T1142] ? ksys_dup3+0x3e0/0x3e0 [ 764.861618][ T1142] ? tomoyo_file_ioctl+0x23/0x30 [ 764.866568][ T1142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 764.872826][ T1142] ? security_file_ioctl+0x93/0xc0 [ 764.877962][ T1142] ksys_ioctl+0xab/0xd0 [ 764.882147][ T1142] __x64_sys_ioctl+0x73/0xb0 [ 764.886765][ T1142] do_syscall_64+0x103/0x610 [ 764.891467][ T1142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.897389][ T1142] RIP: 0033:0x458d99 [ 764.901300][ T1142] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 764.920920][ T1142] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.929348][ T1142] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 764.937341][ T1142] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:44:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 764.945330][ T1142] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 764.953317][ T1142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 764.961302][ T1142] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:29 executing program 3 (fault-call:2 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010028000270f7f8", 0x16}], 0x800019, 0x0) 06:44:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 765.141698][ T1154] FAULT_INJECTION: forcing a failure. [ 765.141698][ T1154] name failslab, interval 1, probability 0, space 0, times 0 [ 765.173479][ T1154] CPU: 1 PID: 1154 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 765.181432][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.191603][ T1154] Call Trace: [ 765.194925][ T1154] dump_stack+0x172/0x1f0 [ 765.199276][ T1154] should_fail.cold+0xa/0x15 [ 765.203884][ T1154] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 765.209713][ T1154] ? ___might_sleep+0x163/0x280 [ 765.214585][ T1154] __should_failslab+0x121/0x190 [ 765.219540][ T1154] should_failslab+0x9/0x14 [ 765.224056][ T1154] kmem_cache_alloc+0x2b2/0x6f0 [ 765.228932][ T1154] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 765.234759][ T1154] ? mempool_free+0x380/0x380 [ 765.239447][ T1154] mempool_alloc_slab+0x47/0x60 [ 765.245313][ T1154] ? mempool_alloc+0x380/0x380 [ 765.250087][ T1154] mempool_init_node+0x2e1/0x560 [ 765.255046][ T1154] ? mempool_alloc+0x380/0x380 [ 765.259822][ T1154] ? mempool_free+0x380/0x380 [ 765.264517][ T1154] mempool_init+0x3d/0x50 [ 765.268862][ T1154] bioset_init+0x536/0x700 [ 765.273293][ T1154] blk_alloc_queue_node+0x137/0x760 [ 765.278517][ T1154] blk_mq_init_queue+0x4a/0xb0 [ 765.283291][ T1154] loop_add+0x2dd/0x8d0 [ 765.287458][ T1154] ? idr_find+0x47/0x60 [ 765.291641][ T1154] loop_control_ioctl+0x165/0x360 [ 765.296682][ T1154] ? loop_add+0x8d0/0x8d0 [ 765.301035][ T1154] ? loop_add+0x8d0/0x8d0 [ 765.305381][ T1154] do_vfs_ioctl+0xd6e/0x1390 [ 765.309991][ T1154] ? ioctl_preallocate+0x210/0x210 [ 765.315125][ T1154] ? selinux_file_mprotect+0x620/0x620 [ 765.320597][ T1154] ? __fget+0x381/0x550 [ 765.324771][ T1154] ? ksys_dup3+0x3e0/0x3e0 [ 765.329208][ T1154] ? tomoyo_file_ioctl+0x23/0x30 [ 765.334161][ T1154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.340414][ T1154] ? security_file_ioctl+0x93/0xc0 [ 765.345542][ T1154] ksys_ioctl+0xab/0xd0 [ 765.349713][ T1154] __x64_sys_ioctl+0x73/0xb0 [ 765.354321][ T1154] do_syscall_64+0x103/0x610 [ 765.358931][ T1154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.364832][ T1154] RIP: 0033:0x458d99 [ 765.368737][ T1154] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 765.388352][ T1154] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.396802][ T1154] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 765.404808][ T1154] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 765.412835][ T1154] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 765.420819][ T1154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 765.428811][ T1154] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:30 executing program 3 (fault-call:2 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x30c0) 06:44:30 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x204000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401006f000270f7f8", 0x16}], 0x800019, 0x0) [ 765.557442][ T1171] binder: 1168:1171 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 765.647586][ T1173] FAULT_INJECTION: forcing a failure. [ 765.647586][ T1173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 765.660835][ T1173] CPU: 0 PID: 1173 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 765.668745][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.678818][ T1173] Call Trace: [ 765.682133][ T1173] dump_stack+0x172/0x1f0 [ 765.686497][ T1173] should_fail.cold+0xa/0x15 [ 765.691123][ T1173] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 765.696945][ T1173] ? __lock_acquire+0x548/0x3fb0 [ 765.696962][ T1173] ? __kmalloc_node+0x4e/0x70 [ 765.696975][ T1173] ? mempool_init_node+0x138/0x560 [ 765.696986][ T1173] ? mempool_init+0x3d/0x50 [ 765.697010][ T1173] ? bioset_init+0x536/0x700 [ 765.711777][ T1173] should_fail_alloc_page+0x50/0x60 [ 765.711795][ T1173] __alloc_pages_nodemask+0x1a1/0x7e0 [ 765.711813][ T1173] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 765.711827][ T1173] ? find_held_lock+0x35/0x130 [ 765.711851][ T1173] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 765.711871][ T1173] cache_grow_begin+0x9c/0x860 [ 765.711885][ T1173] ? mempool_alloc_slab+0x47/0x60 [ 765.711901][ T1173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 765.711924][ T1173] kmem_cache_alloc+0x62d/0x6f0 [ 765.721029][ T1173] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 765.721054][ T1173] ? mempool_free+0x380/0x380 [ 765.721065][ T1173] mempool_alloc_slab+0x47/0x60 [ 765.721075][ T1173] ? mempool_alloc+0x380/0x380 [ 765.721087][ T1173] mempool_init_node+0x2e1/0x560 [ 765.721104][ T1173] ? mempool_alloc+0x380/0x380 [ 765.721117][ T1173] ? mempool_free+0x380/0x380 [ 765.721127][ T1173] mempool_init+0x3d/0x50 [ 765.721147][ T1173] bioset_init+0x536/0x700 [ 765.721167][ T1173] blk_alloc_queue_node+0x137/0x760 [ 765.721192][ T1173] blk_mq_init_queue+0x4a/0xb0 [ 765.731776][ T1173] loop_add+0x2dd/0x8d0 [ 765.731794][ T1173] ? idr_find+0x47/0x60 [ 765.731812][ T1173] loop_control_ioctl+0x165/0x360 [ 765.731827][ T1173] ? loop_add+0x8d0/0x8d0 [ 765.731845][ T1173] ? loop_add+0x8d0/0x8d0 06:44:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 765.731863][ T1173] do_vfs_ioctl+0xd6e/0x1390 [ 765.731882][ T1173] ? ioctl_preallocate+0x210/0x210 [ 765.731897][ T1173] ? selinux_file_mprotect+0x620/0x620 [ 765.731918][ T1173] ? __fget+0x381/0x550 [ 765.748213][ T1173] ? ksys_dup3+0x3e0/0x3e0 [ 765.748238][ T1173] ? tomoyo_file_ioctl+0x23/0x30 [ 765.748262][ T1173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.758073][ T1173] ? security_file_ioctl+0x93/0xc0 [ 765.774971][ T1173] ksys_ioctl+0xab/0xd0 [ 765.774993][ T1173] __x64_sys_ioctl+0x73/0xb0 [ 765.775011][ T1173] do_syscall_64+0x103/0x610 [ 765.775037][ T1173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.789338][ T1173] RIP: 0033:0x458d99 [ 765.789355][ T1173] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 765.789363][ T1173] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.789377][ T1173] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 765.789393][ T1173] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 765.808076][ T1173] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 765.808085][ T1173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 765.808095][ T1173] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:30 executing program 3 (fault-call:2 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010070000270f7f8", 0x16}], 0x800019, 0x0) 06:44:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x30d8) 06:44:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 766.227858][ T1199] FAULT_INJECTION: forcing a failure. [ 766.227858][ T1199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.241098][ T1199] CPU: 1 PID: 1199 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 766.241110][ T1199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.241116][ T1199] Call Trace: [ 766.241145][ T1199] dump_stack+0x172/0x1f0 [ 766.241169][ T1199] should_fail.cold+0xa/0x15 [ 766.259131][ T1199] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 766.259148][ T1199] ? __lock_acquire+0x548/0x3fb0 [ 766.259162][ T1199] ? __kmalloc_node+0x4e/0x70 [ 766.259174][ T1199] ? mempool_init_node+0x138/0x560 [ 766.259184][ T1199] ? mempool_init+0x3d/0x50 [ 766.259198][ T1199] ? bioset_init+0x536/0x700 [ 766.259216][ T1199] should_fail_alloc_page+0x50/0x60 [ 766.259230][ T1199] __alloc_pages_nodemask+0x1a1/0x7e0 [ 766.259253][ T1199] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 766.317564][ T1199] ? find_held_lock+0x35/0x130 [ 766.322356][ T1199] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 766.328189][ T1199] cache_grow_begin+0x9c/0x860 [ 766.332976][ T1199] ? mempool_alloc_slab+0x47/0x60 [ 766.338028][ T1199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 766.344293][ T1199] kmem_cache_alloc+0x62d/0x6f0 [ 766.349166][ T1199] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 766.355699][ T1199] ? mempool_free+0x380/0x380 [ 766.360395][ T1199] mempool_alloc_slab+0x47/0x60 [ 766.365254][ T1199] ? mempool_alloc+0x380/0x380 [ 766.370032][ T1199] mempool_init_node+0x2e1/0x560 [ 766.374986][ T1199] ? mempool_alloc+0x380/0x380 [ 766.379764][ T1199] ? mempool_free+0x380/0x380 [ 766.384459][ T1199] mempool_init+0x3d/0x50 [ 766.388818][ T1199] bioset_init+0x536/0x700 [ 766.393249][ T1199] blk_alloc_queue_node+0x137/0x760 [ 766.398465][ T1199] blk_mq_init_queue+0x4a/0xb0 [ 766.403248][ T1199] loop_add+0x2dd/0x8d0 [ 766.407411][ T1199] ? idr_find+0x47/0x60 [ 766.411587][ T1199] loop_control_ioctl+0x165/0x360 [ 766.416632][ T1199] ? loop_add+0x8d0/0x8d0 [ 766.420986][ T1199] ? loop_add+0x8d0/0x8d0 [ 766.425342][ T1199] do_vfs_ioctl+0xd6e/0x1390 [ 766.429957][ T1199] ? ioctl_preallocate+0x210/0x210 [ 766.435084][ T1199] ? selinux_file_mprotect+0x620/0x620 [ 766.440553][ T1199] ? __fget+0x381/0x550 [ 766.444728][ T1199] ? ksys_dup3+0x3e0/0x3e0 [ 766.449160][ T1199] ? tomoyo_file_ioctl+0x23/0x30 [ 766.454111][ T1199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.460376][ T1199] ? security_file_ioctl+0x93/0xc0 [ 766.465516][ T1199] ksys_ioctl+0xab/0xd0 [ 766.469693][ T1199] __x64_sys_ioctl+0x73/0xb0 [ 766.474301][ T1199] do_syscall_64+0x103/0x610 [ 766.478910][ T1199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 766.484810][ T1199] RIP: 0033:0x458d99 [ 766.488711][ T1199] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.508323][ T1199] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.516750][ T1199] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 766.524734][ T1199] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 766.532721][ T1199] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 766.540709][ T1199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 766.548693][ T1199] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:31 executing program 3 (fault-call:2 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002040100b4000270f7f8", 0x16}], 0x800019, 0x0) 06:44:31 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x30f0) 06:44:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010028040270f7f8", 0x16}], 0x800019, 0x0) [ 766.755695][ T1216] binder: 1209:1216 ioctl c0306201 0 returned -14 [ 766.776653][ T1216] binder: 1209:1216 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3108) [ 767.000204][ T1230] FAULT_INJECTION: forcing a failure. [ 767.000204][ T1230] name failslab, interval 1, probability 0, space 0, times 0 [ 767.050895][ T1230] CPU: 0 PID: 1230 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 767.063615][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.073943][ T1230] Call Trace: [ 767.077266][ T1230] dump_stack+0x172/0x1f0 [ 767.081633][ T1230] should_fail.cold+0xa/0x15 [ 767.086253][ T1230] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 767.092092][ T1230] ? ___might_sleep+0x163/0x280 [ 767.097015][ T1230] __should_failslab+0x121/0x190 [ 767.101979][ T1230] should_failslab+0x9/0x14 [ 767.106533][ T1230] kmem_cache_alloc+0x2b2/0x6f0 [ 767.113871][ T1230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 767.120137][ T1230] ? __phys_addr+0xa4/0x120 [ 767.124663][ T1230] ? mempool_init+0x3d/0x50 [ 767.129196][ T1230] mempool_alloc_slab+0x47/0x60 [ 767.134323][ T1230] ? mempool_alloc+0x380/0x380 [ 767.139115][ T1230] mempool_init_node+0x2e1/0x560 [ 767.144078][ T1230] ? mempool_alloc+0x380/0x380 [ 767.148875][ T1230] ? mempool_free+0x380/0x380 [ 767.160093][ T1230] mempool_init+0x3d/0x50 [ 767.164456][ T1230] bioset_init+0x536/0x700 [ 767.168900][ T1230] blk_alloc_queue_node+0x137/0x760 [ 767.174123][ T1230] blk_mq_init_queue+0x4a/0xb0 [ 767.178905][ T1230] loop_add+0x2dd/0x8d0 [ 767.183069][ T1230] ? idr_find+0x47/0x60 [ 767.187243][ T1230] loop_control_ioctl+0x165/0x360 [ 767.192283][ T1230] ? loop_add+0x8d0/0x8d0 [ 767.196625][ T1230] ? loop_add+0x8d0/0x8d0 [ 767.200971][ T1230] do_vfs_ioctl+0xd6e/0x1390 [ 767.205584][ T1230] ? ioctl_preallocate+0x210/0x210 [ 767.210711][ T1230] ? selinux_file_mprotect+0x620/0x620 [ 767.216184][ T1230] ? __fget+0x381/0x550 [ 767.220368][ T1230] ? ksys_dup3+0x3e0/0x3e0 [ 767.224809][ T1230] ? tomoyo_file_ioctl+0x23/0x30 [ 767.229758][ T1230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 767.236017][ T1230] ? security_file_ioctl+0x93/0xc0 [ 767.241813][ T1230] ksys_ioctl+0xab/0xd0 [ 767.245991][ T1230] __x64_sys_ioctl+0x73/0xb0 [ 767.250594][ T1230] do_syscall_64+0x103/0x610 [ 767.255198][ T1230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 767.261096][ T1230] RIP: 0033:0x458d99 [ 767.264992][ T1230] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.284608][ T1230] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.293040][ T1230] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 06:44:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 767.301029][ T1230] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 767.309017][ T1230] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 767.317007][ T1230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 767.324996][ T1230] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 767.363805][ T1228] FAT-fs (loop4): bogus number of directory entries (516) [ 767.399138][ T1228] FAT-fs (loop4): Can't find a valid FAT filesystem [ 767.459210][ T1228] FAT-fs (loop4): bogus number of directory entries (516) [ 767.472466][ T1228] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:32 executing program 3 (fault-call:2 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401008e040270f7f8", 0x16}], 0x800019, 0x0) [ 767.622662][ T1252] FAULT_INJECTION: forcing a failure. [ 767.622662][ T1252] name failslab, interval 1, probability 0, space 0, times 0 [ 767.654877][ T1252] CPU: 1 PID: 1252 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 767.662801][ T1252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.672858][ T1252] Call Trace: [ 767.676167][ T1252] dump_stack+0x172/0x1f0 [ 767.680532][ T1252] should_fail.cold+0xa/0x15 [ 767.685138][ T1252] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 767.690947][ T1252] ? ___might_sleep+0x163/0x280 [ 767.695809][ T1252] __should_failslab+0x121/0x190 [ 767.700754][ T1252] should_failslab+0x9/0x14 [ 767.705263][ T1252] kmem_cache_alloc_node_trace+0x270/0x720 [ 767.711076][ T1252] ? mempool_alloc+0x380/0x380 [ 767.715849][ T1252] ? mempool_free+0x380/0x380 [ 767.720616][ T1252] ? mempool_init+0x3d/0x50 [ 767.725131][ T1252] bdi_alloc_node+0x8a/0x100 [ 767.729734][ T1252] blk_alloc_queue_node+0x15d/0x760 [ 767.734943][ T1252] blk_mq_init_queue+0x4a/0xb0 [ 767.739716][ T1252] loop_add+0x2dd/0x8d0 [ 767.743877][ T1252] ? idr_find+0x47/0x60 [ 767.748049][ T1252] loop_control_ioctl+0x165/0x360 [ 767.753083][ T1252] ? loop_add+0x8d0/0x8d0 [ 767.757426][ T1252] ? loop_add+0x8d0/0x8d0 [ 767.761763][ T1252] do_vfs_ioctl+0xd6e/0x1390 [ 767.766370][ T1252] ? ioctl_preallocate+0x210/0x210 [ 767.771496][ T1252] ? selinux_file_mprotect+0x620/0x620 [ 767.776957][ T1252] ? __fget+0x381/0x550 [ 767.781124][ T1252] ? ksys_dup3+0x3e0/0x3e0 [ 767.785575][ T1252] ? tomoyo_file_ioctl+0x23/0x30 [ 767.790530][ T1252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 767.796798][ T1252] ? security_file_ioctl+0x93/0xc0 [ 767.802019][ T1252] ksys_ioctl+0xab/0xd0 [ 767.806206][ T1252] __x64_sys_ioctl+0x73/0xb0 [ 767.810811][ T1252] do_syscall_64+0x103/0x610 [ 767.815422][ T1252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 767.821345][ T1252] RIP: 0033:0x458d99 [ 767.825247][ T1252] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.844858][ T1252] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.853285][ T1252] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 767.861279][ T1252] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:44:32 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3120) 06:44:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 767.869256][ T1252] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 767.877234][ T1252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 767.885210][ T1252] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 767.902471][ T1255] binder: 1251:1255 ioctl c0306201 0 returned -14 06:44:32 executing program 3 (fault-call:2 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 767.921054][ T1255] binder: 1251:1255 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 767.957129][ T1253] FAT-fs (loop4): bogus number of directory entries (516) [ 767.992392][ T1253] FAT-fs (loop4): Can't find a valid FAT filesystem [ 768.005945][ T1267] FAULT_INJECTION: forcing a failure. [ 768.005945][ T1267] name failslab, interval 1, probability 0, space 0, times 0 [ 768.018809][ T1267] CPU: 1 PID: 1267 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 768.026988][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.037072][ T1267] Call Trace: [ 768.040390][ T1267] dump_stack+0x172/0x1f0 [ 768.044755][ T1267] should_fail.cold+0xa/0x15 [ 768.049378][ T1267] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 768.055214][ T1267] ? ___might_sleep+0x163/0x280 [ 768.060093][ T1267] __should_failslab+0x121/0x190 [ 768.065118][ T1267] should_failslab+0x9/0x14 [ 768.069656][ T1267] kmem_cache_alloc_node_trace+0x270/0x720 [ 768.075503][ T1267] ? mempool_alloc+0x380/0x380 [ 768.080321][ T1267] ? mempool_free+0x380/0x380 [ 768.085031][ T1267] ? mempool_init+0x3d/0x50 [ 768.089568][ T1267] bdi_alloc_node+0x8a/0x100 [ 768.094184][ T1267] blk_alloc_queue_node+0x15d/0x760 [ 768.099438][ T1267] blk_mq_init_queue+0x4a/0xb0 [ 768.104229][ T1267] loop_add+0x2dd/0x8d0 [ 768.108407][ T1267] ? idr_find+0x47/0x60 [ 768.112591][ T1267] loop_control_ioctl+0x165/0x360 [ 768.117648][ T1267] ? loop_add+0x8d0/0x8d0 [ 768.122004][ T1267] ? loop_add+0x8d0/0x8d0 [ 768.126399][ T1267] do_vfs_ioctl+0xd6e/0x1390 [ 768.131055][ T1267] ? ioctl_preallocate+0x210/0x210 [ 768.136190][ T1267] ? selinux_file_mprotect+0x620/0x620 [ 768.141669][ T1267] ? __fget+0x381/0x550 [ 768.145853][ T1267] ? ksys_dup3+0x3e0/0x3e0 [ 768.150294][ T1267] ? tomoyo_file_ioctl+0x23/0x30 [ 768.155254][ T1267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 768.161527][ T1267] ? security_file_ioctl+0x93/0xc0 [ 768.166663][ T1267] ksys_ioctl+0xab/0xd0 [ 768.170845][ T1267] __x64_sys_ioctl+0x73/0xb0 [ 768.175636][ T1267] do_syscall_64+0x103/0x610 [ 768.180260][ T1267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.186168][ T1267] RIP: 0033:0x458d99 [ 768.190083][ T1267] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.209704][ T1267] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.218137][ T1267] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 768.226128][ T1267] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 768.234115][ T1267] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 768.242103][ T1267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 768.250094][ T1267] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:32 executing program 3 (fault-call:2 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 768.322189][ T1253] FAT-fs (loop4): bogus number of directory entries (516) [ 768.329353][ T1253] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401008f040270f7f8", 0x16}], 0x800019, 0x0) 06:44:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3138) [ 768.432627][ T1276] FAULT_INJECTION: forcing a failure. [ 768.432627][ T1276] name failslab, interval 1, probability 0, space 0, times 0 [ 768.502776][ T1276] CPU: 1 PID: 1276 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 768.510726][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.520884][ T1276] Call Trace: [ 768.524300][ T1276] dump_stack+0x172/0x1f0 [ 768.528663][ T1276] should_fail.cold+0xa/0x15 [ 768.533280][ T1276] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 768.539111][ T1276] ? ___might_sleep+0x163/0x280 [ 768.543981][ T1276] __should_failslab+0x121/0x190 [ 768.548944][ T1276] should_failslab+0x9/0x14 [ 768.553472][ T1276] kmem_cache_alloc_trace+0x2d1/0x760 [ 768.558882][ T1276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 768.565149][ T1276] ? bdi_init+0x356/0x420 [ 768.569517][ T1276] blk_alloc_queue_stats+0x40/0x100 [ 768.574750][ T1276] blk_alloc_queue_node+0x195/0x760 [ 768.579983][ T1276] blk_mq_init_queue+0x4a/0xb0 [ 768.584892][ T1276] loop_add+0x2dd/0x8d0 [ 768.589071][ T1276] ? idr_find+0x47/0x60 [ 768.593255][ T1276] loop_control_ioctl+0x165/0x360 [ 768.598303][ T1276] ? loop_add+0x8d0/0x8d0 [ 768.602660][ T1276] ? loop_add+0x8d0/0x8d0 [ 768.607056][ T1276] do_vfs_ioctl+0xd6e/0x1390 [ 768.611677][ T1276] ? ioctl_preallocate+0x210/0x210 [ 768.616806][ T1276] ? selinux_file_mprotect+0x620/0x620 [ 768.622288][ T1276] ? __fget+0x381/0x550 [ 768.626469][ T1276] ? ksys_dup3+0x3e0/0x3e0 [ 768.630924][ T1276] ? tomoyo_file_ioctl+0x23/0x30 [ 768.635883][ T1276] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 768.642146][ T1276] ? security_file_ioctl+0x93/0xc0 [ 768.647452][ T1276] ksys_ioctl+0xab/0xd0 [ 768.651638][ T1276] __x64_sys_ioctl+0x73/0xb0 [ 768.656293][ T1276] do_syscall_64+0x103/0x610 [ 768.660905][ T1276] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.666808][ T1276] RIP: 0033:0x458d99 [ 768.670707][ T1276] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.690321][ T1276] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.698750][ T1276] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 768.706740][ T1276] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 768.714729][ T1276] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 768.722717][ T1276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 768.730705][ T1276] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:33 executing program 3 (fault-call:2 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 768.778281][ T1279] FAT-fs (loop4): bogus number of directory entries (516) [ 768.795362][ T1279] FAT-fs (loop4): Can't find a valid FAT filesystem [ 768.847119][ T1293] binder: 1290:1293 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 768.876785][ T1279] FAT-fs (loop4): bogus number of directory entries (516) 06:44:33 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 768.893279][ T1279] FAT-fs (loop4): Can't find a valid FAT filesystem [ 768.925623][ T1297] FAULT_INJECTION: forcing a failure. [ 768.925623][ T1297] name failslab, interval 1, probability 0, space 0, times 0 [ 768.952184][ T1297] CPU: 0 PID: 1297 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 768.960131][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.970206][ T1297] Call Trace: [ 768.973541][ T1297] dump_stack+0x172/0x1f0 [ 768.977914][ T1297] should_fail.cold+0xa/0x15 [ 768.982548][ T1297] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 768.988385][ T1297] ? ___might_sleep+0x163/0x280 [ 768.993290][ T1297] __should_failslab+0x121/0x190 [ 768.998256][ T1297] should_failslab+0x9/0x14 [ 769.002807][ T1297] kmem_cache_alloc_node_trace+0x270/0x720 [ 769.008653][ T1297] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 769.014199][ T1297] blkg_alloc+0x93/0x590 [ 769.018519][ T1297] blkcg_init_queue+0x27/0x3d0 [ 769.023312][ T1297] blk_alloc_queue_node+0x541/0x760 [ 769.028556][ T1297] blk_mq_init_queue+0x4a/0xb0 [ 769.033356][ T1297] loop_add+0x2dd/0x8d0 [ 769.037546][ T1297] ? idr_find+0x47/0x60 [ 769.041737][ T1297] loop_control_ioctl+0x165/0x360 [ 769.046786][ T1297] ? loop_add+0x8d0/0x8d0 [ 769.051148][ T1297] ? loop_add+0x8d0/0x8d0 [ 769.055521][ T1297] do_vfs_ioctl+0xd6e/0x1390 [ 769.060140][ T1297] ? ioctl_preallocate+0x210/0x210 [ 769.065301][ T1297] ? selinux_file_mprotect+0x620/0x620 [ 769.070803][ T1297] ? __fget+0x381/0x550 [ 769.074992][ T1297] ? ksys_dup3+0x3e0/0x3e0 [ 769.079447][ T1297] ? tomoyo_file_ioctl+0x23/0x30 [ 769.091370][ T1297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.097642][ T1297] ? security_file_ioctl+0x93/0xc0 [ 769.102782][ T1297] ksys_ioctl+0xab/0xd0 [ 769.106969][ T1297] __x64_sys_ioctl+0x73/0xb0 [ 769.113062][ T1297] do_syscall_64+0x103/0x610 [ 769.117687][ T1297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 769.123619][ T1297] RIP: 0033:0x458d99 [ 769.127548][ T1297] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.147441][ T1297] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.155882][ T1297] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 769.164045][ T1297] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 06:44:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:33 executing program 3 (fault-call:2 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 769.172030][ T1297] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.180018][ T1297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 769.188012][ T1297] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3150) 06:44:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010090040270f7f8", 0x16}], 0x800019, 0x0) 06:44:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 769.346197][ T1309] FAULT_INJECTION: forcing a failure. [ 769.346197][ T1309] name failslab, interval 1, probability 0, space 0, times 0 [ 769.364926][ T1309] CPU: 0 PID: 1309 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 769.372835][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.372843][ T1309] Call Trace: [ 769.372872][ T1309] dump_stack+0x172/0x1f0 [ 769.372897][ T1309] should_fail.cold+0xa/0x15 [ 769.372918][ T1309] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 769.372942][ T1309] ? ___might_sleep+0x163/0x280 [ 769.372967][ T1309] __should_failslab+0x121/0x190 [ 769.372984][ T1309] should_failslab+0x9/0x14 [ 769.373004][ T1309] kmem_cache_alloc_node_trace+0x270/0x720 [ 769.373037][ T1309] ? pcpu_balance_workfn+0x12a0/0x12a0 [ 769.426749][ T1309] blkg_alloc+0x93/0x590 [ 769.431021][ T1309] blkcg_init_queue+0x27/0x3d0 [ 769.435803][ T1309] blk_alloc_queue_node+0x541/0x760 [ 769.441021][ T1309] blk_mq_init_queue+0x4a/0xb0 [ 769.445796][ T1309] loop_add+0x2dd/0x8d0 [ 769.449957][ T1309] ? idr_find+0x47/0x60 [ 769.454151][ T1309] loop_control_ioctl+0x165/0x360 [ 769.459206][ T1309] ? loop_add+0x8d0/0x8d0 [ 769.463552][ T1309] ? loop_add+0x8d0/0x8d0 [ 769.467910][ T1309] do_vfs_ioctl+0xd6e/0x1390 [ 769.472530][ T1309] ? ioctl_preallocate+0x210/0x210 [ 769.477651][ T1309] ? selinux_file_mprotect+0x620/0x620 [ 769.483111][ T1309] ? __fget+0x381/0x550 [ 769.487275][ T1309] ? ksys_dup3+0x3e0/0x3e0 [ 769.491704][ T1309] ? tomoyo_file_ioctl+0x23/0x30 [ 769.496649][ T1309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.502898][ T1309] ? security_file_ioctl+0x93/0xc0 [ 769.508016][ T1309] ksys_ioctl+0xab/0xd0 [ 769.512188][ T1309] __x64_sys_ioctl+0x73/0xb0 [ 769.516793][ T1309] do_syscall_64+0x103/0x610 [ 769.521403][ T1309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 769.527311][ T1309] RIP: 0033:0x458d99 [ 769.531217][ T1309] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.550832][ T1309] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.559298][ T1309] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 769.567311][ T1309] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 769.575299][ T1309] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 769.583289][ T1309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 769.591299][ T1309] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:34 executing program 3 (fault-call:2 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 769.620956][ T1313] FAT-fs (loop4): bogus number of directory entries (516) [ 769.642007][ T1313] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3168) [ 769.758055][ T1323] FAULT_INJECTION: forcing a failure. [ 769.758055][ T1323] name failslab, interval 1, probability 0, space 0, times 0 [ 769.786158][ T1325] binder: 1321:1325 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 769.803799][ T1323] CPU: 0 PID: 1323 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 769.811736][ T1323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.821804][ T1323] Call Trace: [ 769.825124][ T1323] dump_stack+0x172/0x1f0 [ 769.829481][ T1323] should_fail.cold+0xa/0x15 [ 769.834111][ T1323] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 769.839948][ T1323] ? ___might_sleep+0x163/0x280 [ 769.844827][ T1323] __should_failslab+0x121/0x190 [ 769.849788][ T1323] should_failslab+0x9/0x14 [ 769.854307][ T1323] kmem_cache_alloc_node_trace+0x270/0x720 [ 769.860130][ T1323] iolatency_pd_alloc+0x8d/0x140 [ 769.865100][ T1323] ? iolatency_clear_scaling.isra.0+0x180/0x180 [ 769.871351][ T1323] blkcg_activate_policy+0x128/0x560 [ 769.876640][ T1323] ? mark_held_locks+0xa4/0xf0 [ 769.881427][ T1323] blk_iolatency_init+0x151/0x2f0 [ 769.886464][ T1323] blkcg_init_queue+0x163/0x3d0 [ 769.891333][ T1323] blk_alloc_queue_node+0x541/0x760 [ 769.896562][ T1323] blk_mq_init_queue+0x4a/0xb0 [ 769.901335][ T1323] loop_add+0x2dd/0x8d0 [ 769.905516][ T1323] ? idr_find+0x47/0x60 [ 769.909688][ T1323] loop_control_ioctl+0x165/0x360 [ 769.914718][ T1323] ? loop_add+0x8d0/0x8d0 [ 769.919085][ T1323] ? loop_add+0x8d0/0x8d0 [ 769.923425][ T1323] do_vfs_ioctl+0xd6e/0x1390 [ 769.928026][ T1323] ? ioctl_preallocate+0x210/0x210 [ 769.933143][ T1323] ? selinux_file_mprotect+0x620/0x620 [ 769.938606][ T1323] ? __fget+0x381/0x550 [ 769.942772][ T1323] ? ksys_dup3+0x3e0/0x3e0 [ 769.947202][ T1323] ? tomoyo_file_ioctl+0x23/0x30 [ 769.952146][ T1323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 769.958392][ T1323] ? security_file_ioctl+0x93/0xc0 [ 769.963542][ T1323] ksys_ioctl+0xab/0xd0 [ 769.967744][ T1323] __x64_sys_ioctl+0x73/0xb0 [ 769.972344][ T1323] do_syscall_64+0x103/0x610 [ 769.976944][ T1323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 769.982843][ T1323] RIP: 0033:0x458d99 [ 769.986745][ T1323] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.006377][ T1323] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.014812][ T1323] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 770.022812][ T1323] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 770.030813][ T1323] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 770.038820][ T1323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 770.046806][ T1323] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 770.067759][ T1313] FAT-fs (loop4): bogus number of directory entries (516) [ 770.088072][ T1313] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:34 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:34 executing program 3 (fault-call:2 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010091040270f7f8", 0x16}], 0x800019, 0x0) 06:44:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x2040000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3180) [ 770.260590][ T1343] FAULT_INJECTION: forcing a failure. [ 770.260590][ T1343] name failslab, interval 1, probability 0, space 0, times 0 [ 770.306049][ T1343] CPU: 1 PID: 1343 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 770.313992][ T1343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.324068][ T1343] Call Trace: [ 770.327407][ T1343] dump_stack+0x172/0x1f0 [ 770.331759][ T1343] should_fail.cold+0xa/0x15 [ 770.336368][ T1343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.342193][ T1343] ? ___might_sleep+0x163/0x280 [ 770.347058][ T1343] __should_failslab+0x121/0x190 [ 770.352021][ T1343] should_failslab+0x9/0x14 [ 770.356549][ T1343] kmem_cache_alloc_node_trace+0x270/0x720 [ 770.362388][ T1343] iolatency_pd_alloc+0x8d/0x140 [ 770.367364][ T1343] ? iolatency_clear_scaling.isra.0+0x180/0x180 [ 770.373621][ T1343] blkcg_activate_policy+0x128/0x560 [ 770.378937][ T1343] ? mark_held_locks+0xa4/0xf0 [ 770.383736][ T1343] blk_iolatency_init+0x151/0x2f0 [ 770.388776][ T1343] blkcg_init_queue+0x163/0x3d0 [ 770.393637][ T1343] blk_alloc_queue_node+0x541/0x760 [ 770.398847][ T1343] blk_mq_init_queue+0x4a/0xb0 [ 770.403622][ T1343] loop_add+0x2dd/0x8d0 [ 770.407809][ T1343] ? idr_find+0x47/0x60 [ 770.412004][ T1343] loop_control_ioctl+0x165/0x360 [ 770.417056][ T1343] ? loop_add+0x8d0/0x8d0 [ 770.421397][ T1343] ? loop_add+0x8d0/0x8d0 [ 770.425770][ T1343] do_vfs_ioctl+0xd6e/0x1390 [ 770.430376][ T1343] ? ioctl_preallocate+0x210/0x210 [ 770.435509][ T1343] ? selinux_file_mprotect+0x620/0x620 [ 770.440978][ T1343] ? __fget+0x381/0x550 [ 770.445176][ T1343] ? ksys_dup3+0x3e0/0x3e0 [ 770.449609][ T1343] ? tomoyo_file_ioctl+0x23/0x30 [ 770.454573][ T1343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.460819][ T1343] ? security_file_ioctl+0x93/0xc0 [ 770.465938][ T1343] ksys_ioctl+0xab/0xd0 [ 770.470105][ T1343] __x64_sys_ioctl+0x73/0xb0 [ 770.474704][ T1343] do_syscall_64+0x103/0x610 [ 770.479309][ T1343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.485206][ T1343] RIP: 0033:0x458d99 06:44:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 770.489138][ T1343] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.508755][ T1343] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.517195][ T1343] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 770.525174][ T1343] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 770.533153][ T1343] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 770.541129][ T1343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 770.549105][ T1343] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:35 executing program 3 (fault-call:2 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 770.617708][ T1346] FAT-fs (loop4): bogus number of directory entries (516) [ 770.656837][ T1346] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 770.690035][ T1356] binder: 1354:1356 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3198) [ 770.745455][ T1346] FAT-fs (loop4): bogus number of directory entries (516) [ 770.759343][ T1346] FAT-fs (loop4): Can't find a valid FAT filesystem [ 770.774203][ T1361] FAULT_INJECTION: forcing a failure. [ 770.774203][ T1361] name failslab, interval 1, probability 0, space 0, times 0 [ 770.825254][ T1361] CPU: 1 PID: 1361 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 770.833191][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.843253][ T1361] Call Trace: [ 770.846564][ T1361] dump_stack+0x172/0x1f0 [ 770.850914][ T1361] should_fail.cold+0xa/0x15 [ 770.855527][ T1361] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.861345][ T1361] ? ___might_sleep+0x163/0x280 [ 770.866231][ T1361] __should_failslab+0x121/0x190 [ 770.871178][ T1361] should_failslab+0x9/0x14 [ 770.875709][ T1361] kmem_cache_alloc_node_trace+0x270/0x720 [ 770.881622][ T1361] ? init_timer_key+0x122/0x370 [ 770.886498][ T1361] blk_throtl_init+0x7d/0x680 [ 770.891186][ T1361] blkcg_init_queue+0x277/0x3d0 [ 770.896076][ T1361] blk_alloc_queue_node+0x541/0x760 [ 770.901308][ T1361] blk_mq_init_queue+0x4a/0xb0 [ 770.906099][ T1361] loop_add+0x2dd/0x8d0 [ 770.910283][ T1361] ? idr_find+0x47/0x60 [ 770.914475][ T1361] loop_control_ioctl+0x165/0x360 [ 770.919536][ T1361] ? loop_add+0x8d0/0x8d0 [ 770.923875][ T1361] ? loop_add+0x8d0/0x8d0 [ 770.928213][ T1361] do_vfs_ioctl+0xd6e/0x1390 [ 770.932812][ T1361] ? ioctl_preallocate+0x210/0x210 [ 770.937928][ T1361] ? selinux_file_mprotect+0x620/0x620 [ 770.943414][ T1361] ? __fget+0x381/0x550 [ 770.947584][ T1361] ? ksys_dup3+0x3e0/0x3e0 [ 770.952024][ T1361] ? tomoyo_file_ioctl+0x23/0x30 [ 770.956992][ T1361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 770.963254][ T1361] ? security_file_ioctl+0x93/0xc0 [ 770.968376][ T1361] ksys_ioctl+0xab/0xd0 [ 770.972559][ T1361] __x64_sys_ioctl+0x73/0xb0 [ 770.977162][ T1361] do_syscall_64+0x103/0x610 [ 770.981767][ T1361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.987660][ T1361] RIP: 0033:0x458d99 [ 770.991560][ T1361] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.011233][ T1361] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.019662][ T1361] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 771.027654][ T1361] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 771.035644][ T1361] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 771.043633][ T1361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 771.051628][ T1361] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:35 executing program 3 (fault-call:2 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:35 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010092040270f7f8", 0x16}], 0x800019, 0x0) [ 771.263049][ T1373] FAULT_INJECTION: forcing a failure. [ 771.263049][ T1373] name failslab, interval 1, probability 0, space 0, times 0 [ 771.288790][ T1373] CPU: 1 PID: 1373 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 771.296742][ T1373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.306815][ T1373] Call Trace: [ 771.310135][ T1373] dump_stack+0x172/0x1f0 [ 771.314519][ T1373] should_fail.cold+0xa/0x15 [ 771.319132][ T1373] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 771.324961][ T1373] ? ___might_sleep+0x163/0x280 [ 771.329865][ T1373] __should_failslab+0x121/0x190 [ 771.334820][ T1373] should_failslab+0x9/0x14 [ 771.339344][ T1373] kmem_cache_alloc_node_trace+0x270/0x720 [ 771.345174][ T1373] ? init_timer_key+0x122/0x370 [ 771.350052][ T1373] blk_throtl_init+0x7d/0x680 [ 771.354773][ T1373] blkcg_init_queue+0x277/0x3d0 [ 771.359648][ T1373] blk_alloc_queue_node+0x541/0x760 [ 771.364868][ T1373] blk_mq_init_queue+0x4a/0xb0 [ 771.369648][ T1373] loop_add+0x2dd/0x8d0 [ 771.373820][ T1373] ? idr_find+0x47/0x60 [ 771.377997][ T1373] loop_control_ioctl+0x165/0x360 [ 771.383049][ T1373] ? loop_add+0x8d0/0x8d0 [ 771.387398][ T1373] ? loop_add+0x8d0/0x8d0 [ 771.391919][ T1373] do_vfs_ioctl+0xd6e/0x1390 [ 771.396538][ T1373] ? ioctl_preallocate+0x210/0x210 [ 771.401671][ T1373] ? selinux_file_mprotect+0x620/0x620 [ 771.407159][ T1373] ? __fget+0x381/0x550 [ 771.411335][ T1373] ? ksys_dup3+0x3e0/0x3e0 [ 771.415772][ T1373] ? tomoyo_file_ioctl+0x23/0x30 [ 771.420722][ T1373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.426978][ T1373] ? security_file_ioctl+0x93/0xc0 [ 771.432112][ T1373] ksys_ioctl+0xab/0xd0 [ 771.436284][ T1373] __x64_sys_ioctl+0x73/0xb0 [ 771.440891][ T1373] do_syscall_64+0x103/0x610 [ 771.445508][ T1373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 771.451409][ T1373] RIP: 0033:0x458d99 [ 771.455318][ T1373] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.474933][ T1373] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.483359][ T1373] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 771.491345][ T1373] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 771.499352][ T1373] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 06:44:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 771.507341][ T1373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 771.515325][ T1373] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 771.551153][ T1378] FAT-fs (loop4): bogus number of directory entries (516) 06:44:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x31b0) 06:44:36 executing program 3 (fault-call:2 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 771.569883][ T1378] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 771.642106][ T1388] binder: 1385:1388 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 771.657209][ T1378] FAT-fs (loop4): bogus number of directory entries (516) [ 771.682474][ T1378] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010093040270f7f8", 0x16}], 0x800019, 0x0) [ 771.751423][ T1393] FAULT_INJECTION: forcing a failure. [ 771.751423][ T1393] name failslab, interval 1, probability 0, space 0, times 0 06:44:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 771.829094][ T1393] CPU: 0 PID: 1393 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 771.837211][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.847390][ T1393] Call Trace: [ 771.850731][ T1393] dump_stack+0x172/0x1f0 [ 771.855083][ T1393] should_fail.cold+0xa/0x15 [ 771.859685][ T1393] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 771.865515][ T1393] ? ___might_sleep+0x163/0x280 [ 771.870376][ T1393] __should_failslab+0x121/0x190 [ 771.875317][ T1393] should_failslab+0x9/0x14 [ 771.879825][ T1393] kmem_cache_alloc_node_trace+0x270/0x720 [ 771.885662][ T1393] ? __debug_object_init+0x190/0xc30 [ 771.890969][ T1393] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 771.896806][ T1393] throtl_pd_alloc+0x8b/0x990 [ 771.901516][ T1393] ? throtl_schedule_next_dispatch+0x640/0x640 [ 771.907692][ T1393] blkcg_activate_policy+0x128/0x560 [ 771.912992][ T1393] ? throtl_pd_offline+0x210/0x210 [ 771.918109][ T1393] blk_throtl_init+0x459/0x680 [ 771.922883][ T1393] blkcg_init_queue+0x277/0x3d0 [ 771.927735][ T1393] blk_alloc_queue_node+0x541/0x760 [ 771.932972][ T1393] blk_mq_init_queue+0x4a/0xb0 [ 771.937739][ T1393] loop_add+0x2dd/0x8d0 [ 771.941919][ T1393] ? idr_find+0x47/0x60 [ 771.946083][ T1393] loop_control_ioctl+0x165/0x360 [ 771.951111][ T1393] ? loop_add+0x8d0/0x8d0 [ 771.955450][ T1393] ? loop_add+0x8d0/0x8d0 [ 771.959783][ T1393] do_vfs_ioctl+0xd6e/0x1390 [ 771.964379][ T1393] ? ioctl_preallocate+0x210/0x210 [ 771.969526][ T1393] ? selinux_file_mprotect+0x620/0x620 [ 771.974988][ T1393] ? __fget+0x381/0x550 [ 771.979152][ T1393] ? ksys_dup3+0x3e0/0x3e0 [ 771.983582][ T1393] ? tomoyo_file_ioctl+0x23/0x30 [ 771.988535][ T1393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 771.994806][ T1393] ? security_file_ioctl+0x93/0xc0 [ 771.999923][ T1393] ksys_ioctl+0xab/0xd0 [ 772.004109][ T1393] __x64_sys_ioctl+0x73/0xb0 [ 772.008704][ T1393] do_syscall_64+0x103/0x610 [ 772.013305][ T1393] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 772.019219][ T1393] RIP: 0033:0x458d99 [ 772.023120][ T1393] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.042729][ T1393] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.051154][ T1393] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 772.059136][ T1393] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 772.067123][ T1393] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 772.075120][ T1393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 772.083097][ T1393] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x31c8) 06:44:36 executing program 3 (fault-call:2 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:36 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 772.214945][ T1403] FAT-fs (loop4): bogus number of directory entries (516) [ 772.249410][ T1403] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 772.306525][ T1411] FAULT_INJECTION: forcing a failure. [ 772.306525][ T1411] name failslab, interval 1, probability 0, space 0, times 0 [ 772.323242][ T1411] CPU: 0 PID: 1411 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 772.331145][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.331153][ T1411] Call Trace: [ 772.331181][ T1411] dump_stack+0x172/0x1f0 [ 772.331208][ T1411] should_fail.cold+0xa/0x15 [ 772.331231][ T1411] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 772.331256][ T1411] ? ___might_sleep+0x163/0x280 [ 772.353549][ T1411] __should_failslab+0x121/0x190 [ 772.353567][ T1411] should_failslab+0x9/0x14 [ 772.353591][ T1411] kmem_cache_alloc_trace+0x2d1/0x760 [ 772.379058][ T1411] ? blk_mq_queue_stopped+0x130/0x130 [ 772.379075][ T1411] ? blk_stat_alloc_callback+0x1b0/0x270 [ 772.379097][ T1411] ? tg_last_low_overflow_time+0x630/0x630 [ 772.390087][ T1411] blk_mq_init_allocated_queue+0xed/0x14c0 [ 772.401672][ T1411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 772.407921][ T1411] ? blkcg_init_queue+0x18a/0x3d0 [ 772.412956][ T1411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 772.419199][ T1411] ? blk_alloc_queue_node+0x559/0x760 [ 772.424583][ T1411] blk_mq_init_queue+0x62/0xb0 [ 772.429354][ T1411] loop_add+0x2dd/0x8d0 [ 772.433604][ T1411] ? idr_find+0x47/0x60 [ 772.437771][ T1411] loop_control_ioctl+0x165/0x360 [ 772.442804][ T1411] ? loop_add+0x8d0/0x8d0 [ 772.447141][ T1411] ? loop_add+0x8d0/0x8d0 [ 772.451509][ T1411] do_vfs_ioctl+0xd6e/0x1390 [ 772.456118][ T1411] ? ioctl_preallocate+0x210/0x210 [ 772.461296][ T1411] ? selinux_file_mprotect+0x620/0x620 [ 772.466757][ T1411] ? __fget+0x381/0x550 [ 772.470921][ T1411] ? ksys_dup3+0x3e0/0x3e0 [ 772.475347][ T1411] ? tomoyo_file_ioctl+0x23/0x30 [ 772.480294][ T1411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 772.486549][ T1411] ? security_file_ioctl+0x93/0xc0 [ 772.491696][ T1411] ksys_ioctl+0xab/0xd0 [ 772.495861][ T1411] __x64_sys_ioctl+0x73/0xb0 [ 772.500465][ T1411] do_syscall_64+0x103/0x610 [ 772.505088][ T1411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 772.510983][ T1411] RIP: 0033:0x458d99 [ 772.514876][ T1411] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.534482][ T1411] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.542912][ T1411] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 06:44:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010094040270f7f8", 0x16}], 0x800019, 0x0) 06:44:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 772.550887][ T1411] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 772.558867][ T1411] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 772.566844][ T1411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 772.574840][ T1411] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:37 executing program 3 (fault-call:2 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 772.668656][ T1424] binder: 1419:1424 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 772.679181][ T1422] FAT-fs (loop4): bogus number of directory entries (516) 06:44:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x31e0) 06:44:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 772.730158][ T1422] FAT-fs (loop4): Can't find a valid FAT filesystem [ 772.784088][ T1430] FAULT_INJECTION: forcing a failure. [ 772.784088][ T1430] name failslab, interval 1, probability 0, space 0, times 0 [ 772.807353][ T1430] CPU: 0 PID: 1430 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 772.815277][ T1430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.825336][ T1430] Call Trace: [ 772.828643][ T1430] dump_stack+0x172/0x1f0 [ 772.832995][ T1430] should_fail.cold+0xa/0x15 [ 772.837600][ T1430] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 772.843452][ T1430] ? ___might_sleep+0x163/0x280 [ 772.848322][ T1430] __should_failslab+0x121/0x190 [ 772.853270][ T1430] should_failslab+0x9/0x14 [ 772.857782][ T1430] kmem_cache_alloc_trace+0x2d1/0x760 [ 772.863160][ T1430] ? blk_mq_queue_stopped+0x130/0x130 [ 772.868542][ T1430] ? blk_stat_alloc_callback+0x1b0/0x270 [ 772.874181][ T1430] ? tg_last_low_overflow_time+0x630/0x630 [ 772.880000][ T1430] blk_mq_init_allocated_queue+0xed/0x14c0 [ 772.885816][ T1430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 772.892063][ T1430] ? blkcg_init_queue+0x18a/0x3d0 [ 772.897099][ T1430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 772.903343][ T1430] ? blk_alloc_queue_node+0x559/0x760 [ 772.908721][ T1430] blk_mq_init_queue+0x62/0xb0 [ 772.913536][ T1430] loop_add+0x2dd/0x8d0 [ 772.917702][ T1430] ? idr_find+0x47/0x60 [ 772.921894][ T1430] loop_control_ioctl+0x165/0x360 [ 772.926946][ T1430] ? loop_add+0x8d0/0x8d0 [ 772.931284][ T1430] ? loop_add+0x8d0/0x8d0 [ 772.935629][ T1430] do_vfs_ioctl+0xd6e/0x1390 [ 772.940231][ T1430] ? ioctl_preallocate+0x210/0x210 [ 772.945346][ T1430] ? selinux_file_mprotect+0x620/0x620 [ 772.950827][ T1430] ? __fget+0x381/0x550 [ 772.955000][ T1430] ? ksys_dup3+0x3e0/0x3e0 [ 772.959437][ T1430] ? tomoyo_file_ioctl+0x23/0x30 [ 772.964393][ T1430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 772.970656][ T1430] ? security_file_ioctl+0x93/0xc0 [ 772.975795][ T1430] ksys_ioctl+0xab/0xd0 [ 772.979979][ T1430] __x64_sys_ioctl+0x73/0xb0 [ 772.984596][ T1430] do_syscall_64+0x103/0x610 [ 772.989211][ T1430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 772.995120][ T1430] RIP: 0033:0x458d99 [ 772.999031][ T1430] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.018739][ T1430] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.027173][ T1430] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 06:44:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010095040270f7f8", 0x16}], 0x800019, 0x0) [ 773.035189][ T1430] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 773.043179][ T1430] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 773.051189][ T1430] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 773.059274][ T1430] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:37 executing program 3 (fault-call:2 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:37 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x31f8) [ 773.165190][ T1440] FAT-fs (loop4): bogus number of directory entries (516) [ 773.190751][ T1440] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x204000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 773.293005][ T1444] FAULT_INJECTION: forcing a failure. [ 773.293005][ T1444] name failslab, interval 1, probability 0, space 0, times 0 [ 773.306034][ T1440] FAT-fs (loop4): bogus number of directory entries (516) [ 773.321657][ T1440] FAT-fs (loop4): Can't find a valid FAT filesystem [ 773.348781][ T1444] CPU: 0 PID: 1444 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 773.356719][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.356727][ T1444] Call Trace: [ 773.356756][ T1444] dump_stack+0x172/0x1f0 [ 773.356782][ T1444] should_fail.cold+0xa/0x15 [ 773.356803][ T1444] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 773.356827][ T1444] ? ___might_sleep+0x163/0x280 [ 773.356853][ T1444] __should_failslab+0x121/0x190 [ 773.356871][ T1444] should_failslab+0x9/0x14 [ 773.356898][ T1444] kmem_cache_alloc_node_trace+0x270/0x720 [ 773.404961][ T1444] ? find_next_bit+0x107/0x130 [ 773.409745][ T1444] __kmalloc_node+0x3d/0x70 [ 773.414262][ T1444] blk_mq_realloc_hw_ctxs+0x1a0/0xfa0 [ 773.419646][ T1444] ? kasan_unpoison_shadow+0x35/0x50 [ 773.424939][ T1444] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 773.430763][ T1444] blk_mq_init_allocated_queue+0x406/0x14c0 [ 773.436664][ T1444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 773.442935][ T1444] ? blkcg_init_queue+0x18a/0x3d0 [ 773.448000][ T1444] blk_mq_init_queue+0x62/0xb0 [ 773.452770][ T1444] loop_add+0x2dd/0x8d0 [ 773.456954][ T1444] ? idr_find+0x47/0x60 [ 773.461147][ T1444] loop_control_ioctl+0x165/0x360 [ 773.466180][ T1444] ? loop_add+0x8d0/0x8d0 [ 773.470532][ T1444] ? loop_add+0x8d0/0x8d0 [ 773.474873][ T1444] do_vfs_ioctl+0xd6e/0x1390 [ 773.479508][ T1444] ? ioctl_preallocate+0x210/0x210 [ 773.484634][ T1444] ? selinux_file_mprotect+0x620/0x620 [ 773.490117][ T1444] ? __fget+0x381/0x550 [ 773.494285][ T1444] ? ksys_dup3+0x3e0/0x3e0 [ 773.498717][ T1444] ? tomoyo_file_ioctl+0x23/0x30 [ 773.503666][ T1444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 773.509913][ T1444] ? security_file_ioctl+0x93/0xc0 [ 773.515058][ T1444] ksys_ioctl+0xab/0xd0 [ 773.519224][ T1444] __x64_sys_ioctl+0x73/0xb0 [ 773.523846][ T1444] do_syscall_64+0x103/0x610 [ 773.528469][ T1444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 773.534376][ T1444] RIP: 0033:0x458d99 [ 773.538277][ T1444] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.557888][ T1444] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.566314][ T1444] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 773.574300][ T1444] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 773.582301][ T1444] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 773.590282][ T1444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 06:44:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 773.598264][ T1444] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:38 executing program 3 (fault-call:2 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010096040270f7f8", 0x16}], 0x800019, 0x0) [ 773.664835][ T1457] binder: 1455:1457 BC_DEAD_BINDER_DONE 0000000000000002 not found 06:44:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3210) [ 773.765354][ T1462] FAULT_INJECTION: forcing a failure. [ 773.765354][ T1462] name failslab, interval 1, probability 0, space 0, times 0 [ 773.789797][ T1462] CPU: 0 PID: 1462 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 773.797719][ T1462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.807782][ T1462] Call Trace: [ 773.811090][ T1462] dump_stack+0x172/0x1f0 [ 773.815438][ T1462] should_fail.cold+0xa/0x15 [ 773.820039][ T1462] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 773.825859][ T1462] ? ___might_sleep+0x163/0x280 [ 773.830717][ T1462] __should_failslab+0x121/0x190 [ 773.835659][ T1462] should_failslab+0x9/0x14 [ 773.840173][ T1462] kmem_cache_alloc_node_trace+0x270/0x720 [ 773.845985][ T1462] ? find_next_bit+0x107/0x130 [ 773.850790][ T1462] __kmalloc_node+0x3d/0x70 [ 773.855304][ T1462] blk_mq_realloc_hw_ctxs+0x1a0/0xfa0 [ 773.860689][ T1462] ? kasan_unpoison_shadow+0x35/0x50 [ 773.865981][ T1462] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 773.871800][ T1462] blk_mq_init_allocated_queue+0x406/0x14c0 [ 773.877705][ T1462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 773.883952][ T1462] ? blkcg_init_queue+0x18a/0x3d0 [ 773.889011][ T1462] blk_mq_init_queue+0x62/0xb0 [ 773.893787][ T1462] loop_add+0x2dd/0x8d0 [ 773.897948][ T1462] ? idr_find+0x47/0x60 [ 773.902114][ T1462] loop_control_ioctl+0x165/0x360 [ 773.907142][ T1462] ? loop_add+0x8d0/0x8d0 [ 773.911480][ T1462] ? loop_add+0x8d0/0x8d0 [ 773.915834][ T1462] do_vfs_ioctl+0xd6e/0x1390 [ 773.920438][ T1462] ? ioctl_preallocate+0x210/0x210 [ 773.925554][ T1462] ? selinux_file_mprotect+0x620/0x620 [ 773.931190][ T1462] ? __fget+0x381/0x550 [ 773.935356][ T1462] ? ksys_dup3+0x3e0/0x3e0 [ 773.939792][ T1462] ? tomoyo_file_ioctl+0x23/0x30 [ 773.944739][ T1462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 773.950985][ T1462] ? security_file_ioctl+0x93/0xc0 [ 773.956109][ T1462] ksys_ioctl+0xab/0xd0 [ 773.960275][ T1462] __x64_sys_ioctl+0x73/0xb0 [ 773.964875][ T1462] do_syscall_64+0x103/0x610 [ 773.969484][ T1462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 773.975426][ T1462] RIP: 0033:0x458d99 [ 773.979348][ T1462] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.998965][ T1462] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.007392][ T1462] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 774.015396][ T1462] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 774.023375][ T1462] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 774.031348][ T1462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 774.039344][ T1462] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:38 executing program 3 (fault-call:2 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 774.070336][ T1464] FAT-fs (loop4): bogus number of directory entries (516) [ 774.094413][ T1464] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 774.168741][ T1464] FAT-fs (loop4): bogus number of directory entries (516) [ 774.198601][ T1464] FAT-fs (loop4): Can't find a valid FAT filesystem [ 774.220242][ T1476] FAULT_INJECTION: forcing a failure. [ 774.220242][ T1476] name failslab, interval 1, probability 0, space 0, times 0 [ 774.243279][ T1476] CPU: 0 PID: 1476 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 774.251224][ T1476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.261297][ T1476] Call Trace: [ 774.264619][ T1476] dump_stack+0x172/0x1f0 [ 774.269004][ T1476] should_fail.cold+0xa/0x15 [ 774.273628][ T1476] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 774.279461][ T1476] ? ___might_sleep+0x163/0x280 [ 774.284346][ T1476] __should_failslab+0x121/0x190 [ 774.289304][ T1476] should_failslab+0x9/0x14 [ 774.294538][ T1476] kmem_cache_alloc_node_trace+0x270/0x720 [ 774.300390][ T1476] ? __kmalloc_node+0x3d/0x70 [ 774.305094][ T1476] __kmalloc_node+0x3d/0x70 [ 774.309624][ T1476] sbitmap_init_node+0x29e/0x510 [ 774.314592][ T1476] blk_mq_realloc_hw_ctxs+0x53b/0xfa0 [ 774.320010][ T1476] ? kasan_unpoison_shadow+0x35/0x50 [ 774.325333][ T1476] blk_mq_init_allocated_queue+0x406/0x14c0 [ 774.331254][ T1476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 774.337549][ T1476] ? blkcg_init_queue+0x18a/0x3d0 [ 774.342607][ T1476] blk_mq_init_queue+0x62/0xb0 [ 774.347393][ T1476] loop_add+0x2dd/0x8d0 [ 774.351568][ T1476] ? idr_find+0x47/0x60 [ 774.355751][ T1476] loop_control_ioctl+0x165/0x360 [ 774.360789][ T1476] ? loop_add+0x8d0/0x8d0 [ 774.365140][ T1476] ? loop_add+0x8d0/0x8d0 [ 774.369509][ T1476] do_vfs_ioctl+0xd6e/0x1390 [ 774.374130][ T1476] ? ioctl_preallocate+0x210/0x210 [ 774.379266][ T1476] ? selinux_file_mprotect+0x620/0x620 [ 774.384738][ T1476] ? __fget+0x381/0x550 [ 774.388915][ T1476] ? ksys_dup3+0x3e0/0x3e0 [ 774.393353][ T1476] ? tomoyo_file_ioctl+0x23/0x30 [ 774.398326][ T1476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 774.404581][ T1476] ? security_file_ioctl+0x93/0xc0 [ 774.409704][ T1476] ksys_ioctl+0xab/0xd0 [ 774.413869][ T1476] __x64_sys_ioctl+0x73/0xb0 [ 774.418481][ T1476] do_syscall_64+0x103/0x610 [ 774.423092][ T1476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 774.428995][ T1476] RIP: 0033:0x458d99 [ 774.432892][ T1476] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.452501][ T1476] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.460923][ T1476] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 06:44:39 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3228) 06:44:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 774.468893][ T1476] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 774.476882][ T1476] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 774.484855][ T1476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 774.492843][ T1476] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:39 executing program 3 (fault-call:2 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e6661740002040100fc250270f7f8", 0x16}], 0x800019, 0x0) 06:44:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0xf5ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 774.715854][ T1491] FAULT_INJECTION: forcing a failure. [ 774.715854][ T1491] name failslab, interval 1, probability 0, space 0, times 0 [ 774.729174][ T1491] CPU: 0 PID: 1491 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 774.730896][ T1492] FAT-fs (loop4): bogus number of directory entries (549) [ 774.737085][ T1491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.754333][ T1491] Call Trace: [ 774.757631][ T1491] dump_stack+0x172/0x1f0 [ 774.761972][ T1491] should_fail.cold+0xa/0x15 [ 774.766574][ T1491] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 774.772393][ T1491] ? ___might_sleep+0x163/0x280 [ 774.777252][ T1491] __should_failslab+0x121/0x190 [ 774.782194][ T1491] should_failslab+0x9/0x14 [ 774.786705][ T1491] kmem_cache_alloc_node_trace+0x270/0x720 [ 774.792528][ T1491] ? find_next_bit+0x107/0x130 [ 774.797310][ T1491] __kmalloc_node+0x3d/0x70 [ 774.801820][ T1491] blk_mq_realloc_hw_ctxs+0x1a0/0xfa0 [ 774.802706][ T1492] FAT-fs (loop4): Can't find a valid FAT filesystem [ 774.807196][ T1491] ? kasan_unpoison_shadow+0x35/0x50 [ 774.807215][ T1491] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 774.807239][ T1491] blk_mq_init_allocated_queue+0x406/0x14c0 [ 774.830759][ T1491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 774.837009][ T1491] ? blkcg_init_queue+0x18a/0x3d0 [ 774.842044][ T1491] blk_mq_init_queue+0x62/0xb0 [ 774.846816][ T1491] loop_add+0x2dd/0x8d0 [ 774.850997][ T1491] ? idr_find+0x47/0x60 [ 774.855160][ T1491] loop_control_ioctl+0x165/0x360 [ 774.860207][ T1491] ? loop_add+0x8d0/0x8d0 [ 774.864554][ T1491] ? loop_add+0x8d0/0x8d0 [ 774.868893][ T1491] do_vfs_ioctl+0xd6e/0x1390 [ 774.873505][ T1491] ? ioctl_preallocate+0x210/0x210 [ 774.878629][ T1491] ? selinux_file_mprotect+0x620/0x620 [ 774.884090][ T1491] ? __fget+0x381/0x550 [ 774.888255][ T1491] ? ksys_dup3+0x3e0/0x3e0 [ 774.892682][ T1491] ? tomoyo_file_ioctl+0x23/0x30 [ 774.897624][ T1491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 774.903872][ T1491] ? security_file_ioctl+0x93/0xc0 [ 774.909011][ T1491] ksys_ioctl+0xab/0xd0 [ 774.913175][ T1491] __x64_sys_ioctl+0x73/0xb0 [ 774.917769][ T1491] do_syscall_64+0x103/0x610 [ 774.922371][ T1491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 774.928266][ T1491] RIP: 0033:0x458d99 [ 774.932217][ T1491] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.951841][ T1491] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:44:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 774.960256][ T1491] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 774.968230][ T1491] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 774.976204][ T1491] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 774.984178][ T1491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 774.992151][ T1491] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:39 executing program 3 (fault-call:2 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3240) 06:44:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) [ 775.063821][ T1492] FAT-fs (loop4): bogus number of directory entries (549) [ 775.113068][ T1492] FAT-fs (loop4): Can't find a valid FAT filesystem [ 775.144403][ T1503] FAULT_INJECTION: forcing a failure. [ 775.144403][ T1503] name failslab, interval 1, probability 0, space 0, times 0 [ 775.170527][ T1503] CPU: 0 PID: 1503 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 775.178463][ T1503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.188633][ T1503] Call Trace: [ 775.191952][ T1503] dump_stack+0x172/0x1f0 [ 775.196306][ T1503] should_fail.cold+0xa/0x15 [ 775.200918][ T1503] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 775.206747][ T1503] ? ___might_sleep+0x163/0x280 [ 775.211619][ T1503] __should_failslab+0x121/0x190 [ 775.216576][ T1503] should_failslab+0x9/0x14 [ 775.221103][ T1503] kmem_cache_alloc_node_trace+0x270/0x720 [ 775.226937][ T1503] ? __kmalloc_node+0x3d/0x70 [ 775.231640][ T1503] __kmalloc_node+0x3d/0x70 [ 775.236160][ T1503] sbitmap_init_node+0x29e/0x510 [ 775.241802][ T1503] blk_mq_realloc_hw_ctxs+0x53b/0xfa0 [ 775.247196][ T1503] ? kasan_unpoison_shadow+0x35/0x50 [ 775.252524][ T1503] blk_mq_init_allocated_queue+0x406/0x14c0 [ 775.258444][ T1503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 775.264706][ T1503] ? blkcg_init_queue+0x18a/0x3d0 [ 775.269759][ T1503] blk_mq_init_queue+0x62/0xb0 [ 775.274563][ T1503] loop_add+0x2dd/0x8d0 [ 775.278731][ T1503] ? idr_find+0x47/0x60 [ 775.282904][ T1503] loop_control_ioctl+0x165/0x360 [ 775.287943][ T1503] ? loop_add+0x8d0/0x8d0 [ 775.292284][ T1503] ? loop_add+0x8d0/0x8d0 [ 775.296627][ T1503] do_vfs_ioctl+0xd6e/0x1390 [ 775.301239][ T1503] ? ioctl_preallocate+0x210/0x210 [ 775.306365][ T1503] ? selinux_file_mprotect+0x620/0x620 [ 775.311840][ T1503] ? __fget+0x381/0x550 [ 775.316011][ T1503] ? ksys_dup3+0x3e0/0x3e0 [ 775.320448][ T1503] ? tomoyo_file_ioctl+0x23/0x30 [ 775.325397][ T1503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 775.331653][ T1503] ? security_file_ioctl+0x93/0xc0 [ 775.336780][ T1503] ksys_ioctl+0xab/0xd0 [ 775.340953][ T1503] __x64_sys_ioctl+0x73/0xb0 [ 775.345559][ T1503] do_syscall_64+0x103/0x610 [ 775.350162][ T1503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 775.356061][ T1503] RIP: 0033:0x458d99 [ 775.359997][ T1503] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.379611][ T1503] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.388038][ T1503] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 775.396026][ T1503] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 775.404012][ T1503] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 775.411999][ T1503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 775.419980][ T1503] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:40 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:40 executing program 3 (fault-call:2 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010005260270f7f8", 0x16}], 0x800019, 0x0) 06:44:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3258) 06:44:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 775.603572][ T1521] FAULT_INJECTION: forcing a failure. [ 775.603572][ T1521] name failslab, interval 1, probability 0, space 0, times 0 [ 775.641050][ T1521] CPU: 0 PID: 1521 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 775.649167][ T1521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.659322][ T1521] Call Trace: [ 775.662661][ T1521] dump_stack+0x172/0x1f0 [ 775.667021][ T1521] should_fail.cold+0xa/0x15 [ 775.671635][ T1521] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 775.677463][ T1521] ? ___might_sleep+0x163/0x280 [ 775.682355][ T1521] __should_failslab+0x121/0x190 [ 775.687312][ T1521] should_failslab+0x9/0x14 [ 775.691838][ T1521] kmem_cache_alloc_node_trace+0x270/0x720 [ 775.697667][ T1521] ? __raw_spin_lock_init+0x2d/0x100 [ 775.702987][ T1521] blk_alloc_flush_queue+0x8f/0x2d0 [ 775.708213][ T1521] blk_mq_realloc_hw_ctxs+0x732/0xfa0 [ 775.713616][ T1521] ? kasan_unpoison_shadow+0x35/0x50 [ 775.718936][ T1521] blk_mq_init_allocated_queue+0x406/0x14c0 [ 775.724857][ T1521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 775.731120][ T1521] ? blkcg_init_queue+0x18a/0x3d0 [ 775.736215][ T1521] blk_mq_init_queue+0x62/0xb0 [ 775.741038][ T1521] loop_add+0x2dd/0x8d0 [ 775.745211][ T1521] ? idr_find+0x47/0x60 [ 775.749387][ T1521] loop_control_ioctl+0x165/0x360 [ 775.754461][ T1521] ? loop_add+0x8d0/0x8d0 [ 775.758830][ T1521] ? loop_add+0x8d0/0x8d0 [ 775.763190][ T1521] do_vfs_ioctl+0xd6e/0x1390 [ 775.767815][ T1521] ? ioctl_preallocate+0x210/0x210 [ 775.772945][ T1521] ? selinux_file_mprotect+0x620/0x620 [ 775.778424][ T1521] ? __fget+0x381/0x550 [ 775.782611][ T1521] ? ksys_dup3+0x3e0/0x3e0 [ 775.787052][ T1521] ? tomoyo_file_ioctl+0x23/0x30 [ 775.792014][ T1521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 775.798282][ T1521] ? security_file_ioctl+0x93/0xc0 [ 775.803419][ T1521] ksys_ioctl+0xab/0xd0 [ 775.807602][ T1521] __x64_sys_ioctl+0x73/0xb0 [ 775.812215][ T1521] do_syscall_64+0x103/0x610 [ 775.816830][ T1521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 775.822740][ T1521] RIP: 0033:0x458d99 [ 775.826738][ T1521] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.846351][ T1521] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.854778][ T1521] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 775.862768][ T1521] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 775.870754][ T1521] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 775.878739][ T1521] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 775.886728][ T1521] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 775.925042][ T1527] FAT-fs (loop4): bogus number of directory entries (550) [ 775.937560][ T1527] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:40 executing program 3 (fault-call:2 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x2}], 0x1000000, 0x70c000, 0x0}) 06:44:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 776.024445][ T1527] FAT-fs (loop4): bogus number of directory entries (550) [ 776.036777][ T1527] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 776.116106][ T1544] FAULT_INJECTION: forcing a failure. [ 776.116106][ T1544] name failslab, interval 1, probability 0, space 0, times 0 [ 776.149476][ T1544] CPU: 0 PID: 1544 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 776.157433][ T1544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.167533][ T1544] Call Trace: [ 776.170854][ T1544] dump_stack+0x172/0x1f0 [ 776.175209][ T1544] should_fail.cold+0xa/0x15 [ 776.179823][ T1544] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 776.185660][ T1544] ? ___might_sleep+0x163/0x280 [ 776.190548][ T1544] __should_failslab+0x121/0x190 [ 776.195523][ T1544] should_failslab+0x9/0x14 [ 776.200046][ T1544] kmem_cache_alloc_node_trace+0x270/0x720 [ 776.205874][ T1544] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 776.211549][ T1544] __kmalloc_node+0x3d/0x70 [ 776.216078][ T1544] sbitmap_init_node+0x29e/0x510 [ 776.221040][ T1544] sbitmap_queue_init_node+0x40/0x710 [ 776.226423][ T1544] ? find_next_bit+0x107/0x130 [ 776.231201][ T1544] blk_mq_init_tags+0x119/0x2c0 [ 776.236055][ T1544] blk_mq_alloc_rq_map+0x88/0x200 [ 776.241093][ T1544] blk_mq_init_sched+0x20c/0x750 [ 776.246041][ T1544] elevator_init_mq+0xcd/0x160 [ 776.250804][ T1544] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 776.256814][ T1544] blk_mq_init_queue+0x62/0xb0 [ 776.261591][ T1544] loop_add+0x2dd/0x8d0 [ 776.265749][ T1544] ? idr_find+0x47/0x60 [ 776.269905][ T1544] loop_control_ioctl+0x165/0x360 [ 776.274928][ T1544] ? loop_add+0x8d0/0x8d0 [ 776.279257][ T1544] ? loop_add+0x8d0/0x8d0 [ 776.283591][ T1544] do_vfs_ioctl+0xd6e/0x1390 [ 776.288214][ T1544] ? ioctl_preallocate+0x210/0x210 [ 776.293415][ T1544] ? selinux_file_mprotect+0x620/0x620 [ 776.298871][ T1544] ? __fget+0x381/0x550 [ 776.303122][ T1544] ? ksys_dup3+0x3e0/0x3e0 [ 776.307553][ T1544] ? tomoyo_file_ioctl+0x23/0x30 [ 776.312515][ T1544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 776.318773][ T1544] ? security_file_ioctl+0x93/0xc0 [ 776.323913][ T1544] ksys_ioctl+0xab/0xd0 [ 776.328084][ T1544] __x64_sys_ioctl+0x73/0xb0 [ 776.332684][ T1544] do_syscall_64+0x103/0x610 [ 776.337295][ T1544] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.343202][ T1544] RIP: 0033:0x458d99 [ 776.347114][ T1544] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.366731][ T1544] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.375155][ T1544] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 776.383138][ T1544] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 776.391119][ T1544] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 776.399105][ T1544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 776.407095][ T1544] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 776.416947][ T1546] binder: 1545:1546 ioctl c0306201 0 returned -14 06:44:41 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3270) 06:44:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010000340270f7f8", 0x16}], 0x800019, 0x0) 06:44:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:41 executing program 3 (fault-call:2 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 776.533476][ T1560] FAULT_INJECTION: forcing a failure. [ 776.533476][ T1560] name failslab, interval 1, probability 0, space 0, times 0 [ 776.558506][ T1561] binder: 1552:1561 ioctl c0306201 0 returned -14 [ 776.585890][ T1560] CPU: 1 PID: 1560 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 776.593833][ T1560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.603908][ T1560] Call Trace: [ 776.607225][ T1560] dump_stack+0x172/0x1f0 [ 776.611581][ T1560] should_fail.cold+0xa/0x15 [ 776.616193][ T1560] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 776.622031][ T1560] ? ___might_sleep+0x163/0x280 [ 776.626910][ T1560] __should_failslab+0x121/0x190 [ 776.631861][ T1560] should_failslab+0x9/0x14 [ 776.636381][ T1560] kmem_cache_alloc_node_trace+0x270/0x720 [ 776.642202][ T1560] ? rcu_read_lock_sched_held+0x110/0x130 [ 776.647949][ T1560] ? kmem_cache_alloc_node_trace+0x352/0x720 [ 776.653957][ T1560] __kmalloc_node+0x3d/0x70 [ 776.658518][ T1560] blk_alloc_flush_queue+0x102/0x2d0 [ 776.663853][ T1560] blk_mq_realloc_hw_ctxs+0x732/0xfa0 [ 776.669255][ T1560] ? kasan_unpoison_shadow+0x35/0x50 [ 776.674576][ T1560] blk_mq_init_allocated_queue+0x406/0x14c0 [ 776.680502][ T1560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 776.686762][ T1560] ? blkcg_init_queue+0x18a/0x3d0 [ 776.691812][ T1560] blk_mq_init_queue+0x62/0xb0 [ 776.696592][ T1560] loop_add+0x2dd/0x8d0 [ 776.700761][ T1560] ? idr_find+0x47/0x60 [ 776.704934][ T1560] loop_control_ioctl+0x165/0x360 [ 776.709975][ T1560] ? loop_add+0x8d0/0x8d0 [ 776.714323][ T1560] ? loop_add+0x8d0/0x8d0 [ 776.718663][ T1560] do_vfs_ioctl+0xd6e/0x1390 [ 776.723271][ T1560] ? ioctl_preallocate+0x210/0x210 [ 776.728397][ T1560] ? selinux_file_mprotect+0x620/0x620 [ 776.733864][ T1560] ? __fget+0x381/0x550 [ 776.738120][ T1560] ? ksys_dup3+0x3e0/0x3e0 [ 776.742561][ T1560] ? tomoyo_file_ioctl+0x23/0x30 [ 776.747520][ T1560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 776.753774][ T1560] ? security_file_ioctl+0x93/0xc0 [ 776.758903][ T1560] ksys_ioctl+0xab/0xd0 [ 776.763073][ T1560] __x64_sys_ioctl+0x73/0xb0 [ 776.767675][ T1560] do_syscall_64+0x103/0x610 [ 776.772283][ T1560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.778196][ T1560] RIP: 0033:0x458d99 [ 776.782105][ T1560] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.801720][ T1560] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.810148][ T1560] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 776.818137][ T1560] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 776.826124][ T1560] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 06:44:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 776.834112][ T1560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 776.842101][ T1560] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 776.874372][ T1551] FAT-fs (loop4): bogus number of FAT structure [ 776.893382][ T1551] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:41 executing program 3 (fault-call:2 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3288) 06:44:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 776.951581][ T1583] binder: 1581:1583 ioctl c0306201 0 returned -14 [ 776.980314][ T1551] FAT-fs (loop4): bogus number of FAT structure 06:44:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x70c000, 0x0}) [ 777.005657][ T1551] FAT-fs (loop4): Can't find a valid FAT filesystem [ 777.072430][ T1588] FAULT_INJECTION: forcing a failure. [ 777.072430][ T1588] name failslab, interval 1, probability 0, space 0, times 0 [ 777.122127][ T1588] CPU: 0 PID: 1588 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 777.130069][ T1588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.140136][ T1588] Call Trace: [ 777.143449][ T1588] dump_stack+0x172/0x1f0 [ 777.147802][ T1588] should_fail.cold+0xa/0x15 [ 777.152416][ T1588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 777.158243][ T1588] ? ___might_sleep+0x163/0x280 [ 777.163121][ T1588] __should_failslab+0x121/0x190 [ 777.168083][ T1588] should_failslab+0x9/0x14 [ 777.172614][ T1588] kmem_cache_alloc_node_trace+0x270/0x720 [ 777.178440][ T1588] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 777.184112][ T1588] __kmalloc_node+0x3d/0x70 [ 777.188651][ T1588] sbitmap_init_node+0x29e/0x510 [ 777.193621][ T1588] sbitmap_queue_init_node+0x40/0x710 [ 777.199017][ T1588] ? find_next_bit+0x107/0x130 [ 777.203811][ T1588] blk_mq_init_tags+0x119/0x2c0 [ 777.208687][ T1588] blk_mq_alloc_rq_map+0x88/0x200 [ 777.213730][ T1588] blk_mq_init_sched+0x20c/0x750 [ 777.218689][ T1588] elevator_init_mq+0xcd/0x160 [ 777.223462][ T1588] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 777.229468][ T1588] blk_mq_init_queue+0x62/0xb0 [ 777.234259][ T1588] loop_add+0x2dd/0x8d0 [ 777.238422][ T1588] ? idr_find+0x47/0x60 [ 777.243222][ T1588] loop_control_ioctl+0x165/0x360 [ 777.248253][ T1588] ? loop_add+0x8d0/0x8d0 [ 777.252592][ T1588] ? loop_add+0x8d0/0x8d0 [ 777.256928][ T1588] do_vfs_ioctl+0xd6e/0x1390 [ 777.261635][ T1588] ? ioctl_preallocate+0x210/0x210 [ 777.266748][ T1588] ? selinux_file_mprotect+0x620/0x620 [ 777.272212][ T1588] ? __fget+0x381/0x550 [ 777.276381][ T1588] ? ksys_dup3+0x3e0/0x3e0 [ 777.280810][ T1588] ? tomoyo_file_ioctl+0x23/0x30 [ 777.285759][ T1588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 777.292010][ T1588] ? security_file_ioctl+0x93/0xc0 [ 777.297135][ T1588] ksys_ioctl+0xab/0xd0 [ 777.301344][ T1588] __x64_sys_ioctl+0x73/0xb0 [ 777.305946][ T1588] do_syscall_64+0x103/0x610 [ 777.310555][ T1588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 777.316453][ T1588] RIP: 0033:0x458d99 [ 777.320358][ T1588] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 777.339994][ T1588] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.348423][ T1588] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 777.356406][ T1588] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 777.364383][ T1588] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 777.372357][ T1588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 777.380332][ T1588] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:42 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401000fff0270f7f8", 0x16}], 0x800019, 0x0) 06:44:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x70c000, 0x0}) 06:44:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x32a0) 06:44:42 executing program 3 (fault-call:2 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 777.837114][ T1605] FAULT_INJECTION: forcing a failure. [ 777.837114][ T1605] name failslab, interval 1, probability 0, space 0, times 0 [ 777.843656][ T1609] FAT-fs (loop4): bogus number of directory entries (767) [ 777.872884][ T1605] CPU: 0 PID: 1605 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 777.880808][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.880815][ T1605] Call Trace: [ 777.880845][ T1605] dump_stack+0x172/0x1f0 [ 777.880869][ T1605] should_fail.cold+0xa/0x15 [ 777.880890][ T1605] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 777.880916][ T1605] ? ___might_sleep+0x163/0x280 [ 777.913810][ T1605] __should_failslab+0x121/0x190 [ 777.918773][ T1605] should_failslab+0x9/0x14 [ 777.918792][ T1605] kmem_cache_alloc_node_trace+0x270/0x720 [ 777.918817][ T1605] __kmalloc_node+0x3d/0x70 [ 777.918838][ T1605] blk_mq_alloc_rq_map+0xb9/0x200 [ 777.930210][ T1609] FAT-fs (loop4): Can't find a valid FAT filesystem [ 777.933703][ T1605] blk_mq_init_sched+0x20c/0x750 [ 777.933732][ T1605] elevator_init_mq+0xcd/0x160 [ 777.933750][ T1605] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 777.933776][ T1605] blk_mq_init_queue+0x62/0xb0 [ 777.950312][ T1605] loop_add+0x2dd/0x8d0 [ 777.950331][ T1605] ? idr_find+0x47/0x60 [ 777.950351][ T1605] loop_control_ioctl+0x165/0x360 [ 777.969983][ T1605] ? loop_add+0x8d0/0x8d0 [ 777.970003][ T1605] ? loop_add+0x8d0/0x8d0 [ 777.970030][ T1605] do_vfs_ioctl+0xd6e/0x1390 [ 777.983527][ T1605] ? ioctl_preallocate+0x210/0x210 [ 777.983548][ T1605] ? selinux_file_mprotect+0x620/0x620 [ 777.992452][ T1605] ? __fget+0x381/0x550 [ 777.992473][ T1605] ? ksys_dup3+0x3e0/0x3e0 [ 777.992503][ T1605] ? tomoyo_file_ioctl+0x23/0x30 [ 777.992526][ T1605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 777.992549][ T1605] ? security_file_ioctl+0x93/0xc0 [ 778.011636][ T1605] ksys_ioctl+0xab/0xd0 [ 778.027881][ T1605] __x64_sys_ioctl+0x73/0xb0 06:44:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x70c000, 0x0}) 06:44:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 778.027902][ T1605] do_syscall_64+0x103/0x610 [ 778.027927][ T1605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.047089][ T1605] RIP: 0033:0x458d99 [ 778.050986][ T1605] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.050996][ T1605] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.051011][ T1605] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 778.051019][ T1605] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 778.051027][ T1605] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 778.051034][ T1605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 778.051042][ T1605] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x70c000, 0x0}) 06:44:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x32b8) 06:44:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x70c000, 0x0}) [ 778.229191][ T1609] FAT-fs (loop4): bogus number of directory entries (767) [ 778.249028][ T1609] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:43 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:43 executing program 3 (fault-call:2 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002340070f7f8", 0x16}], 0x800019, 0x0) 06:44:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x70c000, 0x0}) 06:44:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x32d0) 06:44:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done], 0x1000000, 0x70c000, 0x0}) [ 778.795358][ T1638] FAT-fs (loop4): bogus number of directory entries (52) [ 778.812017][ T1642] FAULT_INJECTION: forcing a failure. [ 778.812017][ T1642] name failslab, interval 1, probability 0, space 0, times 0 [ 778.849585][ T1638] FAT-fs (loop4): Can't find a valid FAT filesystem [ 778.854548][ T1642] CPU: 1 PID: 1642 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 778.864114][ T1642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.874179][ T1642] Call Trace: [ 778.877400][ T1649] binder: 1648:1649 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 778.877502][ T1642] dump_stack+0x172/0x1f0 [ 778.889717][ T1642] should_fail.cold+0xa/0x15 [ 778.894320][ T1642] ? fault_create_debugfs_attr+0x1e0/0x1e0 06:44:43 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 778.900137][ T1642] ? ___might_sleep+0x163/0x280 [ 778.905000][ T1642] __should_failslab+0x121/0x190 [ 778.909959][ T1642] should_failslab+0x9/0x14 [ 778.914475][ T1642] kmem_cache_alloc_node_trace+0x270/0x720 [ 778.920306][ T1642] ? kasan_unpoison_shadow+0x35/0x50 [ 778.925608][ T1642] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 778.931433][ T1642] __kmalloc_node+0x3d/0x70 [ 778.935946][ T1642] blk_mq_alloc_rq_map+0xfa/0x200 [ 778.940985][ T1642] blk_mq_init_sched+0x20c/0x750 [ 778.945948][ T1642] elevator_init_mq+0xcd/0x160 [ 778.950724][ T1642] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 778.956727][ T1642] blk_mq_init_queue+0x62/0xb0 [ 778.961515][ T1642] loop_add+0x2dd/0x8d0 [ 778.965681][ T1642] ? idr_find+0x47/0x60 [ 778.965704][ T1642] loop_control_ioctl+0x165/0x360 [ 778.965719][ T1642] ? loop_add+0x8d0/0x8d0 [ 778.965740][ T1642] ? loop_add+0x8d0/0x8d0 [ 778.974911][ T1642] do_vfs_ioctl+0xd6e/0x1390 [ 778.974933][ T1642] ? ioctl_preallocate+0x210/0x210 [ 778.974948][ T1642] ? selinux_file_mprotect+0x620/0x620 [ 778.974968][ T1642] ? __fget+0x381/0x550 [ 778.993545][ T1642] ? ksys_dup3+0x3e0/0x3e0 [ 778.993571][ T1642] ? tomoyo_file_ioctl+0x23/0x30 [ 778.993587][ T1642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 778.993610][ T1642] ? security_file_ioctl+0x93/0xc0 [ 779.003206][ T1642] ksys_ioctl+0xab/0xd0 [ 779.003226][ T1642] __x64_sys_ioctl+0x73/0xb0 [ 779.003244][ T1642] do_syscall_64+0x103/0x610 [ 779.003263][ T1642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.003275][ T1642] RIP: 0033:0x458d99 06:44:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 779.003294][ T1642] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.012614][ T1642] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.012628][ T1642] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 779.012636][ T1642] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 779.012644][ T1642] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 779.012653][ T1642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 779.012662][ T1642] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:43 executing program 3 (fault-call:2 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x32e8) [ 779.185367][ T1638] FAT-fs (loop4): bogus number of directory entries (52) [ 779.196075][ T1638] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x2040000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 779.314351][ T1663] FAULT_INJECTION: forcing a failure. [ 779.314351][ T1663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 779.348623][ T1663] CPU: 0 PID: 1663 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 779.356556][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.366629][ T1663] Call Trace: [ 779.369947][ T1663] dump_stack+0x172/0x1f0 [ 779.374302][ T1663] should_fail.cold+0xa/0x15 [ 779.378911][ T1663] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 779.384731][ T1663] ? ___might_sleep+0x163/0x280 [ 779.389604][ T1663] should_fail_alloc_page+0x50/0x60 [ 779.394814][ T1663] __alloc_pages_nodemask+0x1a1/0x7e0 [ 779.400205][ T1663] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 779.405935][ T1663] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 779.412186][ T1663] ? find_next_bit+0x107/0x130 [ 779.416956][ T1663] ? __cpu_to_node+0x7e/0xa0 [ 779.421560][ T1663] ? blk_mq_hw_queue_to_node+0xf1/0x140 [ 779.427117][ T1663] blk_mq_alloc_rqs+0x223/0x7f0 [ 779.431983][ T1663] ? __kmalloc_node+0x4e/0x70 [ 779.436676][ T1663] blk_mq_init_sched+0x266/0x750 [ 779.441632][ T1663] elevator_init_mq+0xcd/0x160 [ 779.446408][ T1663] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 779.452409][ T1663] blk_mq_init_queue+0x62/0xb0 [ 779.457179][ T1663] loop_add+0x2dd/0x8d0 [ 779.461341][ T1663] ? idr_find+0x47/0x60 [ 779.465519][ T1663] loop_control_ioctl+0x165/0x360 [ 779.470639][ T1663] ? loop_add+0x8d0/0x8d0 [ 779.474978][ T1663] ? loop_add+0x8d0/0x8d0 [ 779.479341][ T1663] do_vfs_ioctl+0xd6e/0x1390 [ 779.483951][ T1663] ? ioctl_preallocate+0x210/0x210 [ 779.489091][ T1663] ? selinux_file_mprotect+0x620/0x620 [ 779.494557][ T1663] ? __fget+0x381/0x550 [ 779.498747][ T1663] ? ksys_dup3+0x3e0/0x3e0 [ 779.503177][ T1663] ? tomoyo_file_ioctl+0x23/0x30 [ 779.508120][ T1663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 779.514368][ T1663] ? security_file_ioctl+0x93/0xc0 [ 779.519488][ T1663] ksys_ioctl+0xab/0xd0 [ 779.523680][ T1663] __x64_sys_ioctl+0x73/0xb0 [ 779.528302][ T1663] do_syscall_64+0x103/0x610 [ 779.532903][ T1663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.538800][ T1663] RIP: 0033:0x458d99 [ 779.542715][ T1663] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.562327][ T1663] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.570856][ T1663] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 779.578835][ T1663] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 779.586900][ T1663] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 779.594879][ T1663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 779.602858][ T1663] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:44 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002020270f7f8", 0x16}], 0x800019, 0x0) 06:44:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:44 executing program 3 (fault-call:2 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3300) 06:44:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 779.737336][ T1677] FAT-fs (loop4): bogus number of directory entries (514) [ 779.761888][ T1677] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:44 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 779.894138][ T1682] FAULT_INJECTION: forcing a failure. [ 779.894138][ T1682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 779.935040][ T1682] CPU: 0 PID: 1682 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 779.942997][ T1682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.953061][ T1682] Call Trace: [ 779.956374][ T1682] dump_stack+0x172/0x1f0 [ 779.960733][ T1682] should_fail.cold+0xa/0x15 [ 779.965348][ T1682] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 779.971198][ T1682] ? ___might_sleep+0x163/0x280 [ 779.976074][ T1682] should_fail_alloc_page+0x50/0x60 [ 779.981289][ T1682] __alloc_pages_nodemask+0x1a1/0x7e0 [ 779.986689][ T1682] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 779.992430][ T1682] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 779.998694][ T1682] ? find_next_bit+0x107/0x130 [ 780.003481][ T1682] ? __cpu_to_node+0x7e/0xa0 [ 780.008106][ T1682] ? memset+0x32/0x40 [ 780.012112][ T1682] blk_mq_alloc_rqs+0x223/0x7f0 [ 780.016994][ T1682] blk_mq_init_sched+0x266/0x750 [ 780.021966][ T1682] elevator_init_mq+0xcd/0x160 [ 780.026757][ T1682] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 780.032773][ T1682] blk_mq_init_queue+0x62/0xb0 [ 780.037568][ T1682] loop_add+0x2dd/0x8d0 [ 780.041760][ T1682] ? idr_find+0x47/0x60 [ 780.045945][ T1682] loop_control_ioctl+0x165/0x360 [ 780.050988][ T1682] ? loop_add+0x8d0/0x8d0 [ 780.055344][ T1682] ? loop_add+0x8d0/0x8d0 [ 780.059699][ T1682] do_vfs_ioctl+0xd6e/0x1390 [ 780.064315][ T1682] ? ioctl_preallocate+0x210/0x210 [ 780.069450][ T1682] ? selinux_file_mprotect+0x620/0x620 [ 780.074936][ T1682] ? __fget+0x381/0x550 [ 780.079117][ T1682] ? ksys_dup3+0x3e0/0x3e0 [ 780.083564][ T1682] ? tomoyo_file_ioctl+0x23/0x30 [ 780.088540][ T1682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 780.094809][ T1682] ? security_file_ioctl+0x93/0xc0 [ 780.099948][ T1682] ksys_ioctl+0xab/0xd0 [ 780.104131][ T1682] __x64_sys_ioctl+0x73/0xb0 [ 780.108746][ T1682] do_syscall_64+0x103/0x610 [ 780.113842][ T1682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.119744][ T1682] RIP: 0033:0x458d99 [ 780.123653][ T1682] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 780.143269][ T1682] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.151694][ T1682] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 780.151703][ T1682] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 780.151711][ T1682] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 780.151719][ T1682] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 780.151727][ T1682] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 780.216576][ T1677] FAT-fs (loop4): bogus number of directory entries (514) 06:44:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:44 executing program 3 (fault-call:2 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 780.242548][ T1677] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3318) 06:44:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002030270f7f8", 0x16}], 0x800019, 0x0) 06:44:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 780.453827][ T1698] FAULT_INJECTION: forcing a failure. [ 780.453827][ T1698] name failslab, interval 1, probability 0, space 0, times 0 [ 780.473066][ T1698] CPU: 1 PID: 1698 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 780.480975][ T1698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.491059][ T1698] Call Trace: [ 780.494365][ T1698] dump_stack+0x172/0x1f0 [ 780.498712][ T1698] should_fail.cold+0xa/0x15 [ 780.503312][ T1698] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 780.509131][ T1698] ? ___might_sleep+0x163/0x280 [ 780.513989][ T1698] __should_failslab+0x121/0x190 [ 780.518934][ T1698] should_failslab+0x9/0x14 [ 780.523450][ T1698] kmem_cache_alloc_node_trace+0x270/0x720 [ 780.529260][ T1698] ? memset+0x32/0x40 [ 780.533257][ T1698] ? loop_init_request+0x25/0xb0 [ 780.538209][ T1698] elevator_alloc+0x7d/0x170 [ 780.542864][ T1698] dd_init_queue+0x25/0x440 [ 780.547380][ T1698] blk_mq_init_sched+0x3a2/0x750 [ 780.552334][ T1698] elevator_init_mq+0xcd/0x160 [ 780.557102][ T1698] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 780.563098][ T1698] blk_mq_init_queue+0x62/0xb0 [ 780.567890][ T1698] loop_add+0x2dd/0x8d0 [ 780.572057][ T1698] ? idr_find+0x47/0x60 [ 780.576221][ T1698] loop_control_ioctl+0x165/0x360 [ 780.581258][ T1698] ? loop_add+0x8d0/0x8d0 [ 780.585598][ T1698] ? loop_add+0x8d0/0x8d0 [ 780.589934][ T1698] do_vfs_ioctl+0xd6e/0x1390 [ 780.594545][ T1698] ? ioctl_preallocate+0x210/0x210 [ 780.599659][ T1698] ? selinux_file_mprotect+0x620/0x620 [ 780.605118][ T1698] ? __fget+0x381/0x550 [ 780.609282][ T1698] ? ksys_dup3+0x3e0/0x3e0 [ 780.613709][ T1698] ? tomoyo_file_ioctl+0x23/0x30 [ 780.618651][ T1698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 780.624894][ T1698] ? security_file_ioctl+0x93/0xc0 [ 780.630022][ T1698] ksys_ioctl+0xab/0xd0 [ 780.634186][ T1698] __x64_sys_ioctl+0x73/0xb0 [ 780.638782][ T1698] do_syscall_64+0x103/0x610 [ 780.643379][ T1698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.649272][ T1698] RIP: 0033:0x458d99 [ 780.653172][ T1698] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 780.672798][ T1698] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.681209][ T1698] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 780.689268][ T1698] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 780.697236][ T1698] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 780.705208][ T1698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 780.713180][ T1698] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:45 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:45 executing program 3 (fault-call:2 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") [ 780.827874][ T1711] FAT-fs (loop4): bogus number of directory entries (515) 06:44:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3330) 06:44:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 780.873755][ T1711] FAT-fs (loop4): Can't find a valid FAT filesystem [ 780.946935][ T1721] FAULT_INJECTION: forcing a failure. [ 780.946935][ T1721] name failslab, interval 1, probability 0, space 0, times 0 [ 780.985828][ T1721] CPU: 1 PID: 1721 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 06:44:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 780.993793][ T1721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.003852][ T1721] Call Trace: [ 781.007161][ T1721] dump_stack+0x172/0x1f0 [ 781.011526][ T1721] should_fail.cold+0xa/0x15 [ 781.016140][ T1721] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 781.021958][ T1721] ? ___might_sleep+0x163/0x280 [ 781.026817][ T1721] __should_failslab+0x121/0x190 [ 781.031761][ T1721] should_failslab+0x9/0x14 [ 781.036272][ T1721] kmem_cache_alloc_node_trace+0x270/0x720 [ 781.042081][ T1721] ? __mutex_init+0xef/0x130 [ 781.046680][ T1721] dd_init_queue+0x9c/0x440 [ 781.051191][ T1721] blk_mq_init_sched+0x3a2/0x750 [ 781.056147][ T1721] elevator_init_mq+0xcd/0x160 [ 781.060921][ T1721] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 781.066955][ T1721] blk_mq_init_queue+0x62/0xb0 [ 781.071729][ T1721] loop_add+0x2dd/0x8d0 [ 781.075892][ T1721] ? idr_find+0x47/0x60 [ 781.080066][ T1721] loop_control_ioctl+0x165/0x360 [ 781.093377][ T1721] ? loop_add+0x8d0/0x8d0 [ 781.097722][ T1721] ? loop_add+0x8d0/0x8d0 [ 781.102062][ T1721] do_vfs_ioctl+0xd6e/0x1390 [ 781.106664][ T1721] ? ioctl_preallocate+0x210/0x210 [ 781.112436][ T1721] ? selinux_file_mprotect+0x620/0x620 [ 781.117903][ T1721] ? __fget+0x381/0x550 [ 781.122072][ T1721] ? ksys_dup3+0x3e0/0x3e0 [ 781.126510][ T1721] ? tomoyo_file_ioctl+0x23/0x30 [ 781.131454][ T1721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 781.137720][ T1721] ? security_file_ioctl+0x93/0xc0 [ 781.142854][ T1721] ksys_ioctl+0xab/0xd0 [ 781.147047][ T1721] __x64_sys_ioctl+0x73/0xb0 [ 781.151660][ T1721] do_syscall_64+0x103/0x610 [ 781.156277][ T1721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.162183][ T1721] RIP: 0033:0x458d99 [ 781.166092][ T1721] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 781.185708][ T1721] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:44:45 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) [ 781.194143][ T1721] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 781.202127][ T1721] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 781.210116][ T1721] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 781.218106][ T1721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 781.227042][ T1721] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002040270f7f8", 0x16}], 0x800019, 0x0) 06:44:45 executing program 3 (fault-call:2 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3348) 06:44:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 781.369204][ T1732] FAT-fs (loop4): bogus number of directory entries (516) [ 781.393809][ T1732] FAT-fs (loop4): Can't find a valid FAT filesystem [ 781.468206][ T1738] FAULT_INJECTION: forcing a failure. [ 781.468206][ T1738] name failslab, interval 1, probability 0, space 0, times 0 [ 781.504995][ T1738] CPU: 1 PID: 1738 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 781.512929][ T1738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.522983][ T1738] Call Trace: [ 781.526294][ T1738] dump_stack+0x172/0x1f0 [ 781.530633][ T1738] should_fail.cold+0xa/0x15 [ 781.535230][ T1738] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 781.541053][ T1738] ? ___might_sleep+0x163/0x280 [ 781.545910][ T1738] __should_failslab+0x121/0x190 [ 781.550853][ T1738] should_failslab+0x9/0x14 [ 781.555360][ T1738] kmem_cache_alloc_node_trace+0x270/0x720 [ 781.561190][ T1738] ? memset+0x32/0x40 [ 781.565177][ T1738] ? loop_init_request+0x25/0xb0 [ 781.570129][ T1738] elevator_alloc+0x7d/0x170 [ 781.574729][ T1738] dd_init_queue+0x25/0x440 [ 781.579240][ T1738] blk_mq_init_sched+0x3a2/0x750 [ 781.584198][ T1738] elevator_init_mq+0xcd/0x160 [ 781.588974][ T1738] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 781.594971][ T1738] blk_mq_init_queue+0x62/0xb0 [ 781.599743][ T1738] loop_add+0x2dd/0x8d0 [ 781.603904][ T1738] ? idr_find+0x47/0x60 [ 781.608066][ T1738] loop_control_ioctl+0x165/0x360 [ 781.613096][ T1738] ? loop_add+0x8d0/0x8d0 [ 781.617431][ T1738] ? loop_add+0x8d0/0x8d0 [ 781.621856][ T1738] do_vfs_ioctl+0xd6e/0x1390 [ 781.626455][ T1738] ? ioctl_preallocate+0x210/0x210 [ 781.631575][ T1738] ? selinux_file_mprotect+0x620/0x620 [ 781.637038][ T1738] ? __fget+0x381/0x550 [ 781.641207][ T1738] ? ksys_dup3+0x3e0/0x3e0 [ 781.645633][ T1738] ? tomoyo_file_ioctl+0x23/0x30 [ 781.650571][ T1738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 781.656815][ T1738] ? security_file_ioctl+0x93/0xc0 [ 781.661936][ T1738] ksys_ioctl+0xab/0xd0 [ 781.666099][ T1738] __x64_sys_ioctl+0x73/0xb0 [ 781.670695][ T1738] do_syscall_64+0x103/0x610 [ 781.675313][ T1738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.681202][ T1738] RIP: 0033:0x458d99 [ 781.685098][ T1738] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 781.704808][ T1738] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:44:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 781.713223][ T1738] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 781.721198][ T1738] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 781.729172][ T1738] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 781.737145][ T1738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 781.745113][ T1738] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:46 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x797290fd47000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002050270f7f8", 0x16}], 0x800019, 0x0) 06:44:46 executing program 3 (fault-call:2 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3360) 06:44:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 781.945839][ T1752] FAULT_INJECTION: forcing a failure. [ 781.945839][ T1752] name failslab, interval 1, probability 0, space 0, times 0 [ 781.977707][ T1752] CPU: 0 PID: 1752 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 781.985648][ T1752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.985656][ T1752] Call Trace: [ 781.985685][ T1752] dump_stack+0x172/0x1f0 [ 781.985709][ T1752] should_fail.cold+0xa/0x15 [ 781.985728][ T1752] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 781.985752][ T1752] ? ___might_sleep+0x163/0x280 [ 781.985774][ T1752] __should_failslab+0x121/0x190 [ 781.985794][ T1752] should_failslab+0x9/0x14 [ 781.985813][ T1752] kmem_cache_alloc_node_trace+0x270/0x720 [ 781.985827][ T1752] ? memset+0x32/0x40 [ 781.985846][ T1752] ? loop_init_request+0x25/0xb0 [ 781.985884][ T1752] elevator_alloc+0x7d/0x170 [ 782.047474][ T1752] dd_init_queue+0x25/0x440 [ 782.052011][ T1752] blk_mq_init_sched+0x3a2/0x750 [ 782.056978][ T1752] elevator_init_mq+0xcd/0x160 [ 782.061767][ T1752] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 782.067784][ T1752] blk_mq_init_queue+0x62/0xb0 [ 782.072570][ T1752] loop_add+0x2dd/0x8d0 [ 782.076740][ T1752] ? idr_find+0x47/0x60 [ 782.080917][ T1752] loop_control_ioctl+0x165/0x360 [ 782.085961][ T1752] ? loop_add+0x8d0/0x8d0 [ 782.090314][ T1752] ? loop_add+0x8d0/0x8d0 [ 782.094669][ T1752] do_vfs_ioctl+0xd6e/0x1390 [ 782.099286][ T1752] ? ioctl_preallocate+0x210/0x210 [ 782.104413][ T1752] ? selinux_file_mprotect+0x620/0x620 [ 782.110342][ T1752] ? __fget+0x381/0x550 [ 782.114529][ T1752] ? ksys_dup3+0x3e0/0x3e0 [ 782.119224][ T1752] ? tomoyo_file_ioctl+0x23/0x30 [ 782.124172][ T1752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 782.130428][ T1752] ? security_file_ioctl+0x93/0xc0 [ 782.135559][ T1752] ksys_ioctl+0xab/0xd0 [ 782.139812][ T1752] __x64_sys_ioctl+0x73/0xb0 [ 782.144415][ T1752] do_syscall_64+0x103/0x610 [ 782.149015][ T1752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 782.154912][ T1752] RIP: 0033:0x458d99 [ 782.158809][ T1752] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.178433][ T1752] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.186856][ T1752] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 782.194841][ T1752] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 782.202818][ T1752] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 782.210814][ T1752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 782.218804][ T1752] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:46 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3378) [ 782.290705][ T1753] FAT-fs (loop4): bogus number of directory entries (517) [ 782.312140][ T1753] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 782.382053][ T1753] FAT-fs (loop4): bogus number of directory entries (517) [ 782.397181][ T1753] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x204000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:46 executing program 3 (fault-call:2 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002060270f7f8", 0x16}], 0x800019, 0x0) 06:44:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x3390) [ 782.623538][ T1776] FAT-fs (loop4): bogus number of directory entries (518) [ 782.637971][ T1776] FAT-fs (loop4): Can't find a valid FAT filesystem [ 782.717542][ T1780] FAULT_INJECTION: forcing a failure. [ 782.717542][ T1780] name failslab, interval 1, probability 0, space 0, times 0 [ 782.730976][ T1780] CPU: 1 PID: 1780 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 782.738897][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.748966][ T1780] Call Trace: [ 782.752285][ T1780] dump_stack+0x172/0x1f0 [ 782.756636][ T1780] should_fail.cold+0xa/0x15 [ 782.761242][ T1780] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 782.767065][ T1780] ? ___might_sleep+0x163/0x280 [ 782.771934][ T1780] __should_failslab+0x121/0x190 [ 782.776879][ T1780] should_failslab+0x9/0x14 [ 782.781395][ T1780] kmem_cache_alloc_trace+0x2d1/0x760 [ 782.786777][ T1780] ? part_uevent+0x120/0x120 [ 782.791508][ T1780] rand_initialize_disk+0x40/0xc0 [ 782.796557][ T1780] __alloc_disk_node+0x23f/0x420 [ 782.801550][ T1780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 782.807818][ T1780] loop_add+0x3aa/0x8d0 [ 782.811998][ T1780] ? idr_find+0x47/0x60 [ 782.816181][ T1780] loop_control_ioctl+0x165/0x360 [ 782.821226][ T1780] ? loop_add+0x8d0/0x8d0 [ 782.825578][ T1780] ? loop_add+0x8d0/0x8d0 [ 782.829925][ T1780] do_vfs_ioctl+0xd6e/0x1390 [ 782.835325][ T1780] ? ioctl_preallocate+0x210/0x210 [ 782.840466][ T1780] ? selinux_file_mprotect+0x620/0x620 [ 782.845955][ T1780] ? __fget+0x381/0x550 [ 782.850136][ T1780] ? ksys_dup3+0x3e0/0x3e0 [ 782.854582][ T1780] ? tomoyo_file_ioctl+0x23/0x30 [ 782.859545][ T1780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 782.865806][ T1780] ? security_file_ioctl+0x93/0xc0 [ 782.870940][ T1780] ksys_ioctl+0xab/0xd0 [ 782.875116][ T1780] __x64_sys_ioctl+0x73/0xb0 [ 782.879724][ T1780] do_syscall_64+0x103/0x610 [ 782.884337][ T1780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 782.890247][ T1780] RIP: 0033:0x458d99 [ 782.894157][ T1780] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.913775][ T1780] RSP: 002b:00007f2e32752c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.922202][ T1780] RAX: ffffffffffffffda RBX: 00007f2e32752c90 RCX: 0000000000458d99 [ 782.930191][ T1780] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 782.938204][ T1780] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 782.946195][ T1780] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327536d4 [ 782.954184][ T1780] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 06:44:47 executing program 5: socket$kcm(0x2b, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x100000000000, 0x97, "02cce86cf6dd56bf38b059debd5e80dc9a1154ebfd3549833c90a3196f61402bc6fa8b93bffd5ccf772e9d976dbfc8cece781d03f7b0f9405e4e7ec22e72fb0b78223203d1916d57de365055ec049fc2ce48b88102b4947d8a3c2b7766cd4597e6b713b654a287158bd2baab4e0d05ddbc4f0bb6682b26df60f62e8662606c19475f5486a1724e6c48fd1cbc8ab6708770f8a1e90b9481"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 06:44:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002070270f7f8", 0x16}], 0x800019, 0x0) 06:44:47 executing program 3 (fault-call:2 fault-nth:49): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 06:44:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x33a8) [ 783.130238][ T1788] FAT-fs (loop4): bogus number of directory entries (519) [ 783.138973][ T1788] FAT-fs (loop4): Can't find a valid FAT filesystem 06:44:47 executing program 0: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x3ffffd}) 06:44:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:44:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x476, 0x101002) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x7530}, 0x1, 0x40000000000004c, 0x2}], 0x33c0) [ 783.315550][ T1799] FAULT_INJECTION: forcing a failure. [ 783.315550][ T1799] name failslab, interval 1, probability 0, space 0, times 0 [ 783.322276][ C1] sched: RT throttling activated [ 783.383167][ T1799] CPU: 0 PID: 1799 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 783.391111][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.401182][ T1799] Call Trace: [ 783.404519][ T1799] dump_stack+0x172/0x1f0 [ 783.408886][ T1799] should_fail.cold+0xa/0x15 [ 783.413519][ T1799] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 783.419352][ T1799] ? ___might_sleep+0x163/0x280 [ 783.424236][ T1799] __should_failslab+0x121/0x190 [ 783.429195][ T1799] should_failslab+0x9/0x14 [ 783.433726][ T1799] kmem_cache_alloc_trace+0x2d1/0x760 [ 783.439120][ T1799] ? __lock_acquire+0x548/0x3fb0 [ 783.444084][ T1799] ? __lock_acquire+0x548/0x3fb0 [ 783.449145][ T1799] device_create_groups_vargs+0x8e/0x270 [ 783.454812][ T1799] device_create_vargs+0x45/0x60 [ 783.459779][ T1799] bdi_register_va.part.0+0x38/0x740 [ 783.465088][ T1799] bdi_register+0x12a/0x140 [ 783.469615][ T1799] ? bdi_register_va+0x80/0x80 [ 783.474406][ T1799] ? enable_ptr_key_workfn+0x30/0x30 [ 783.479827][ T1799] ? trace_hardirqs_on+0x67/0x230 [ 783.484884][ T1799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 783.491154][ T1799] bdi_register_owner+0x61/0x110 [ 783.496115][ T1799] __device_add_disk+0xd72/0x1170 [ 783.501171][ T1799] ? blk_alloc_devt+0x2e0/0x2e0 [ 783.506038][ T1799] ? sprintf+0xc0/0x100 [ 783.510217][ T1799] ? scnprintf+0x140/0x140 [ 783.514727][ T1799] ? __init_waitqueue_head+0x36/0x90 [ 783.520208][ T1799] ? pm_runtime_init+0x311/0x3b0 [ 783.525186][ T1799] device_add_disk+0x2b/0x40 [ 783.529805][ T1799] loop_add+0x635/0x8d0 [ 783.533994][ T1799] loop_control_ioctl+0x165/0x360 [ 783.539045][ T1799] ? loop_add+0x8d0/0x8d0 [ 783.543407][ T1799] ? loop_add+0x8d0/0x8d0 [ 783.547762][ T1799] do_vfs_ioctl+0xd6e/0x1390 [ 783.552382][ T1799] ? ioctl_preallocate+0x210/0x210 [ 783.557530][ T1799] ? selinux_file_mprotect+0x620/0x620 [ 783.563013][ T1799] ? __fget+0x381/0x550 [ 783.567200][ T1799] ? ksys_dup3+0x3e0/0x3e0 [ 783.571650][ T1799] ? tomoyo_file_ioctl+0x23/0x30 [ 783.576643][ T1799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 783.582911][ T1799] ? security_file_ioctl+0x93/0xc0 [ 783.588054][ T1799] ksys_ioctl+0xab/0xd0 [ 783.592241][ T1799] __x64_sys_ioctl+0x73/0xb0 [ 783.596855][ T1799] do_syscall_64+0x103/0x610 [ 783.601475][ T1799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.607403][ T1799] RIP: 0033:0x458d99 [ 783.611315][ T1799] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:44:48 executing program 0: r0 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x0]) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 783.630929][ T1799] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.639362][ T1799] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 783.647437][ T1799] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 783.655429][ T1799] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 783.663414][ T1799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 783.671399][ T1799] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 783.708731][ T1799] WARNING: CPU: 0 PID: 1799 at block/genhd.c:719 __device_add_disk+0xf00/0x1170 [ 783.717798][ T1799] Kernel panic - not syncing: panic_on_warn set ... [ 783.724432][ T1799] CPU: 0 PID: 1799 Comm: syz-executor.3 Not tainted 5.1.0-rc6+ #83 [ 783.732333][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.742396][ T1799] Call Trace: [ 783.745709][ T1799] dump_stack+0x172/0x1f0 [ 783.750067][ T1799] ? __device_add_disk+0xe20/0x1170 [ 783.755372][ T1799] panic+0x2cb/0x65c [ 783.759299][ T1799] ? __warn_printk+0xf3/0xf3 [ 783.763927][ T1799] ? __device_add_disk+0xf00/0x1170 [ 783.769147][ T1799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 783.775420][ T1799] ? __warn.cold+0x5/0x45 [ 783.779777][ T1799] ? __device_add_disk+0xf00/0x1170 [ 783.784998][ T1799] __warn.cold+0x20/0x45 [ 783.789270][ T1799] ? __device_add_disk+0xf00/0x1170 [ 783.794506][ T1799] report_bug+0x263/0x2b0 [ 783.798949][ T1799] do_error_trap+0x11b/0x200 [ 783.803579][ T1799] do_invalid_op+0x37/0x50 [ 783.808017][ T1799] ? __device_add_disk+0xf00/0x1170 [ 783.813242][ T1799] invalid_op+0x14/0x20 [ 783.817425][ T1799] RIP: 0010:__device_add_disk+0xf00/0x1170 [ 783.823247][ T1799] Code: 36 88 4d fe 0f 0b e9 98 fb ff ff 48 89 bd 18 ff ff ff e8 23 88 4d fe 0f 0b 48 8b bd 18 ff ff ff e9 b5 f7 ff ff e8 10 88 4d fe <0f> 0b e9 80 fe ff ff e8 84 2e 20 fe 4c 89 e7 e8 8c 9e 85 fe e9 3b [ 783.842873][ T1799] RSP: 0018:ffff8880593ffaf8 EFLAGS: 00010246 [ 783.848957][ T1799] RAX: 0000000000040000 RBX: ffff8880593ffbe8 RCX: ffffc9000c6c3000 [ 783.856946][ T1799] RDX: 0000000000040000 RSI: ffffffff832304e0 RDI: 0000000000000005 [ 783.864933][ T1799] RBP: ffff8880593ffc10 R08: ffff88809e7284c0 R09: ffffed1015d05bc8 [ 783.872922][ T1799] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: ffff888061287500 [ 783.880909][ T1799] R13: ffff888061287590 R14: 00000000fffffff4 R15: 0000000000000000 [ 783.889016][ T1799] ? __device_add_disk+0xf00/0x1170 [ 783.894243][ T1799] ? __device_add_disk+0xf00/0x1170 [ 783.899469][ T1799] ? blk_alloc_devt+0x2e0/0x2e0 [ 783.904354][ T1799] ? sprintf+0xc0/0x100 [ 783.908541][ T1799] ? scnprintf+0x140/0x140 [ 783.912982][ T1799] ? __init_waitqueue_head+0x36/0x90 [ 783.918295][ T1799] ? pm_runtime_init+0x311/0x3b0 [ 783.923294][ T1799] device_add_disk+0x2b/0x40 [ 783.927910][ T1799] loop_add+0x635/0x8d0 [ 783.932099][ T1799] loop_control_ioctl+0x165/0x360 [ 783.937144][ T1799] ? loop_add+0x8d0/0x8d0 [ 783.941507][ T1799] ? loop_add+0x8d0/0x8d0 [ 783.945866][ T1799] do_vfs_ioctl+0xd6e/0x1390 [ 783.950521][ T1799] ? ioctl_preallocate+0x210/0x210 [ 783.955663][ T1799] ? selinux_file_mprotect+0x620/0x620 [ 783.961141][ T1799] ? __fget+0x381/0x550 [ 783.965322][ T1799] ? ksys_dup3+0x3e0/0x3e0 [ 783.969770][ T1799] ? tomoyo_file_ioctl+0x23/0x30 [ 783.974730][ T1799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 783.980994][ T1799] ? security_file_ioctl+0x93/0xc0 [ 783.986134][ T1799] ksys_ioctl+0xab/0xd0 [ 783.990313][ T1799] __x64_sys_ioctl+0x73/0xb0 [ 783.994931][ T1799] do_syscall_64+0x103/0x610 [ 783.999561][ T1799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.005467][ T1799] RIP: 0033:0x458d99 [ 784.009385][ T1799] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.029009][ T1799] RSP: 002b:00007f2e32731c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.037441][ T1799] RAX: ffffffffffffffda RBX: 00007f2e32731c90 RCX: 0000000000458d99 [ 784.045426][ T1799] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 784.053415][ T1799] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 784.061404][ T1799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e327326d4 [ 784.069392][ T1799] R13: 00000000004c209a R14: 00000000004d4968 R15: 0000000000000004 [ 784.078899][ T1799] Kernel Offset: disabled [ 784.083418][ T1799] Rebooting in 86400 seconds..