96a33ab92f2154ab5459448f7e20a592b48df0af3200c0d1bf78914801e3c6bee7ada4e62de10dcc5aff922db5108e664c284f1abc2d5df50aab6c078928f5b0ff6421b8a0cee9898fd796f00bc2305f6dccd8e750a3cb06c289dd23e6421947db7a0bc4983b6e371635375d2ab76", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030316130f01f24302c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303230302c6d61785f726561643d3078303030303030303030303030313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c666f776e65723d45691d44549e1ff3dff0863f9cb833e0011ff520f907933d5cfab4afdf8139c10a9e341a592272802fe0f2", @ANYRESDEC=0x0, @ANYBLOB=',mask=^MAY_APPEND,\x00']) [ 612.772472] input: syz1 as /devices/virtual/input/input21 [ 612.937049] input: syz1 as /devices/virtual/input/input22 02:48:56 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}], 0x3, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:48:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:48:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:48:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:48:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="66647d3833b1f96a33ab92f2154ab5459448f7e20a592b48df0af3200c0d1bf78914801e3c6bee7ada4e62de10dcc5aff922db5108e664c284f1abc2d5df50aab6c078928f5b0ff6421b8a0cee9898fd796f00bc2305f6dccd8e750a3cb06c289dd23e6421947db7a0bc4983b6e371635375d2ab76", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030316130f01f24302c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303230302c6d61785f726561643d3078303030303030303030303030313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c666f776e65723d45691d44549e1ff3dff0863f9cb833e0011ff520f907933d5cfab4afdf8139c10a9e341a592272802fe0f2", @ANYRESDEC=0x0, @ANYBLOB=',mask=^MAY_APPEND,\x00']) 02:48:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 613.264557] FAT-fs (loop0): bogus number of reserved sectors [ 613.283776] FAT-fs (loop0): Can't find a valid FAT filesystem [ 613.423796] input: syz1 as /devices/virtual/input/input23 02:48:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 613.596709] audit: type=1800 audit(1582598936.637:114): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17623 res=0 02:48:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="66647d3833b1f96a33ab92f2154ab5459448f7e20a592b48df0af3200c0d1bf78914801e3c6bee7ada4e62de10dcc5aff922db5108e664c284f1abc2d5df50aab6c078928f5b0ff6421b8a0cee9898fd796f00bc2305f6dccd8e750a3cb06c289dd23e6421947db7a0bc4983b6e371635375d2ab76", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030316130f01f24302c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303230302c6d61785f726561643d3078303030303030303030303030313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c666f776e65723d45691d44549e1ff3dff0863f9cb833e0011ff520f907933d5cfab4afdf8139c10a9e341a592272802fe0f2", @ANYRESDEC=0x0, @ANYBLOB=',mask=^MAY_APPEND,\x00']) 02:48:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 613.894174] input: syz1 as /devices/virtual/input/input24 [ 613.942163] input: syz1 as /devices/virtual/input/input25 02:48:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:57 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000500)=""/34, 0x22}, {0x0}], 0x3, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:48:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:48:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:48:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 614.402720] FAT-fs (loop0): bogus number of reserved sectors [ 614.423422] FAT-fs (loop0): Can't find a valid FAT filesystem 02:48:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:48:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 614.529848] audit: type=1800 audit(1582598937.567:115): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17638 res=0 02:48:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lseek(0xffffffffffffffff, 0xb, 0x0) 02:48:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 614.819764] input: syz1 as /devices/virtual/input/input26 02:48:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lseek(0xffffffffffffffff, 0xb, 0x0) 02:48:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lseek(0xffffffffffffffff, 0xb, 0x0) 02:48:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:48:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:48:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:48:58 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:48:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 615.388532] FAT-fs (loop0): bogus number of reserved sectors [ 615.402682] FAT-fs (loop0): Can't find a valid FAT filesystem 02:48:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:48:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 615.513077] audit: type=1800 audit(1582598938.567:116): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17632 res=0 02:48:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 615.739001] input: syz1 as /devices/virtual/input/input27 02:48:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:48:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:59 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 616.238038] input: syz1 as /devices/virtual/input/input28 02:48:59 executing program 2: mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:59 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:48:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:48:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:48:59 executing program 2: mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:48:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:48:59 executing program 2: mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 616.692083] FAT-fs (loop0): bogus number of reserved sectors [ 616.721822] FAT-fs (loop0): Can't find a valid FAT filesystem 02:48:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:48:59 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 616.885740] input: syz1 as /devices/virtual/input/input29 [ 616.967646] audit: type=1800 audit(1582598940.017:117): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17663 res=0 02:49:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:00 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:00 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 617.303342] input: syz1 as /devices/virtual/input/input30 02:49:00 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:49:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:00 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:49:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:49:00 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 617.749622] FAT-fs (loop0): bogus number of reserved sectors [ 617.768916] FAT-fs (loop0): Can't find a valid FAT filesystem [ 617.889217] input: syz1 as /devices/virtual/input/input31 [ 618.033390] audit: type=1800 audit(1582598941.087:118): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17676 res=0 02:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 618.372367] input: syz1 as /devices/virtual/input/input32 02:49:01 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:49:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:49:01 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 618.890108] FAT-fs (loop0): bogus number of reserved sectors [ 618.901713] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:02 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0xb, 0x0) [ 618.991079] input: syz1 as /devices/virtual/input/input33 [ 619.142894] audit: type=1800 audit(1582598942.197:119): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17652 res=0 02:49:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:02 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:02 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:02 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(0x0, 0x0, 0x0) lseek(r0, 0xb, 0x0) 02:49:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 02:49:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:02 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xb, 0x0) [ 619.892307] FAT-fs (loop0): bogus number of reserved sectors [ 619.898182] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 620.122125] audit: type=1800 audit(1582598943.177:120): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17687 res=0 02:49:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:03 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xb, 0x0) 02:49:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:03 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xb, 0x0) 02:49:03 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}, {&(0x7f0000000780)=""/151, 0x97}], 0x5, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:49:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:03 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:49:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:03 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:49:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 620.845285] FAT-fs (loop0): bogus number of reserved sectors [ 620.867838] FAT-fs (loop0): Can't find a valid FAT filesystem [ 620.948325] audit: type=1800 audit(1582598943.997:121): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17664 res=0 02:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:04 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:04 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:04 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) 02:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:49:04 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 621.837387] FAT-fs (loop0): bogus number of reserved sectors [ 621.846244] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 622.093046] audit: type=1800 audit(1582598945.147:122): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17643 res=0 02:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 622.368945] input: syz1 as /devices/virtual/input/input40 02:49:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:05 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 02:49:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 622.924222] FAT-fs (loop0): bogus number of reserved sectors [ 622.952235] FAT-fs (loop0): Can't find a valid FAT filesystem [ 623.106705] input: syz1 as /devices/virtual/input/input41 02:49:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 623.254628] audit: type=1800 audit(1582598946.277:123): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17667 res=0 02:49:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 623.575604] input: syz1 as /devices/virtual/input/input42 02:49:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:07 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 02:49:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 624.029981] FAT-fs (loop0): bogus number of reserved sectors [ 624.061823] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 624.334430] audit: type=1800 audit(1582598947.387:124): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17690 res=0 02:49:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:07 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:08 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}], 0x4, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:08 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 02:49:08 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 625.083761] FAT-fs (loop0): bogus number of reserved sectors [ 625.104647] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 625.338877] audit: type=1800 audit(1582598948.387:125): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17716 res=0 02:49:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 625.567992] input: syz1 as /devices/virtual/input/input43 02:49:09 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}, {0x0}], 0x4, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:09 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x6, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) 02:49:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:09 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 626.097101] FAT-fs (loop0): bogus number of reserved sectors [ 626.104034] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:09 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 626.234249] input: syz1 as /devices/virtual/input/input44 [ 626.359387] audit: type=1800 audit(1582598949.407:126): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17727 res=0 02:49:09 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:09 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 626.686171] input: syz1 as /devices/virtual/input/input45 02:49:10 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}], 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) [ 627.144010] FAT-fs (loop0): bogus number of reserved sectors [ 627.156129] FAT-fs (loop0): Can't find a valid FAT filesystem [ 627.302983] audit: type=1800 audit(1582598950.357:127): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17754 res=0 [ 627.320837] input: syz1 as /devices/virtual/input/input46 02:49:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 627.689031] input: syz1 as /devices/virtual/input/input47 02:49:11 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}], 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002, 0x0, 0x0, 0x28}) 02:49:11 executing program 5: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 628.139327] FAT-fs (loop0): bogus number of reserved sectors [ 628.161827] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 628.206715] input: syz1 as /devices/virtual/input/input48 02:49:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) [ 628.311830] audit: type=1800 audit(1582598951.367:128): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17775 res=0 02:49:11 executing program 5: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 628.566869] input: syz1 as /devices/virtual/input/input49 02:49:11 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}], 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:12 executing program 5: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 02:49:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 629.008732] FAT-fs (loop0): invalid media value (0x00) 02:49:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) [ 629.030964] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 629.087698] input: syz1 as /devices/virtual/input/input50 02:49:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 629.161296] audit: type=1800 audit(1582598952.217:129): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17792 res=0 02:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) [ 629.385898] input: syz1 as /devices/virtual/input/input51 02:49:12 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/62, 0x3e}, {0x0}], 0x3, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) 02:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 02:49:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) [ 629.933446] input: syz1 as /devices/virtual/input/input52 02:49:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 02:49:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 630.023993] FAT-fs (loop0): invalid media value (0x00) [ 630.059152] FAT-fs (loop0): Can't find a valid FAT filesystem 02:49:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 630.096277] audit: type=1800 audit(1582598953.147:130): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17796 res=0 [ 630.256777] input: syz1 as /devices/virtual/input/input53 02:49:13 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 02:49:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002}) 02:49:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}], 0x1, 0x0) 02:49:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002}) [ 630.791145] input: syz1 as /devices/virtual/input/input54 02:49:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}], 0x1, 0x0) 02:49:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:49:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0010002}) [ 630.934696] FAT-fs (loop0): invalid media value (0x00) [ 630.975915] FAT-fs (loop0): Can't find a valid FAT filesystem [ 631.055060] audit: type=1800 audit(1582598954.107:131): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=16559 res=0 [ 631.086713] input: syz1 as /devices/virtual/input/input55 02:49:14 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}], 0x1, 0x0) 02:49:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) chown(0x0, 0x0, 0xffffffffffffffff) 02:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 631.475023] audit: type=1326 audit(1582598954.517:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8708 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f28a code=0xffff0000 [ 631.608963] input: syz1 as /devices/virtual/input/input56 02:49:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:49:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[], 0x0, 0x10200}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 631.802510] FAT-fs (loop0): invalid media value (0x00) 02:49:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 631.846386] FAT-fs (loop0): Can't find a valid FAT filesystem [ 631.903885] input: syz1 as /devices/virtual/input/input57 [ 631.980829] audit: type=1800 audit(1582598955.027:133): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=16854 res=0 [ 632.257359] audit: type=1326 audit(1582598955.307:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8708 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f28a code=0xffff0000 02:49:15 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setresuid(0x0, r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 02:49:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a49e, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34144cbc44157b99, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001380), 0x4000000000000f0, 0x0, &(0x7f0000000200)={0x77359400}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x1, 0x0) pipe(0x0) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0xfc80, 0x0, 0x7, 0x0], &(0x7f00000001c0)=[0x7, 0x8001]}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000011039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) [ 632.421581] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.454107] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.474760] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.495376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.541198] input: syz1 as /devices/virtual/input/input58 02:49:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:15 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 632.583941] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 02:49:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 632.638831] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.656057] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.700635] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.718437] FAT-fs (loop0): invalid media value (0x00) [ 632.729978] FAT-fs (loop0): Can't find a valid FAT filesystem [ 632.730680] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 02:49:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 02:49:15 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 632.760922] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 632.771465] input: syz1 as /devices/virtual/input/input59 [ 632.885424] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 632.897727] audit: type=1800 audit(1582598955.947:135): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=16754 res=0 [ 632.986130] audit: type=1800 audit(1582598955.947:136): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="loop3" ino=13 res=0 [ 633.013040] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:16 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}], 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 02:49:16 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 02:49:16 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 633.283792] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 633.301919] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 633.314308] input: syz1 as /devices/virtual/input/input60 [ 633.356736] audit: type=1800 audit(1582598956.407:137): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=15 res=0 02:49:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 02:49:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:16 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 02:49:16 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 633.446954] audit: type=1800 audit(1582598956.447:138): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16785 res=0 [ 633.476098] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) [ 633.593345] input: syz1 as /devices/virtual/input/input61 [ 633.619206] FAT-fs (loop0): invalid media value (0x00) [ 633.625167] FAT-fs (loop0): Can't find a valid FAT filesystem [ 633.636575] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 633.678109] audit: type=1800 audit(1582598956.727:139): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=17 res=0 [ 633.682371] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 633.790820] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 633.882600] input: syz1 as /devices/virtual/input/input62 02:49:17 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}], 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 02:49:17 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 02:49:17 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 02:49:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 634.177430] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.217407] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.281933] input: syz1 as /devices/virtual/input/input63 [ 634.311174] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.340657] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 02:49:17 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:17 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 02:49:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) [ 634.470663] FAT-fs (loop0): invalid media value (0x00) [ 634.476233] FAT-fs (loop0): Can't find a valid FAT filesystem [ 634.535103] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.540560] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.557960] input: syz1 as /devices/virtual/input/input64 02:49:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 634.742514] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.792670] input: syz1 as /devices/virtual/input/input65 02:49:17 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}], 0x1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:17 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 02:49:17 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 634.958944] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 634.983325] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 635.071404] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 635.081335] input: syz1 as /devices/virtual/input/input66 02:49:18 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 02:49:18 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) 02:49:18 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) [ 635.327571] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 635.360223] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 635.376239] FAT-fs (loop0): invalid media value (0x00) 02:49:18 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 635.405244] input: syz1 as /devices/virtual/input/input67 [ 635.409393] FAT-fs (loop0): Can't find a valid FAT filesystem [ 635.495387] kauditd_printk_skb: 8 callbacks suppressed [ 635.495397] audit: type=1800 audit(1582598958.547:148): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=16626 res=0 [ 635.628732] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:19 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:19 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 02:49:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 02:49:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:19 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 636.019644] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 636.034741] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 02:49:19 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:19 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 636.155483] input: syz1 as /devices/virtual/input/input68 02:49:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 636.308895] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 636.323733] FAT-fs (loop0): invalid media value (0x00) [ 636.336576] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 636.357506] FAT-fs (loop0): Can't find a valid FAT filesystem [ 636.437845] audit: type=1800 audit(1582598959.487:149): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=16626 res=0 [ 636.520188] input: syz1 as /devices/virtual/input/input69 02:49:19 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:19 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:19 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 636.766075] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 636.791401] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 636.938775] input: syz1 as /devices/virtual/input/input70 02:49:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:20 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:20 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:20 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 637.142445] audit: type=1800 audit(1582598960.187:150): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16946 res=0 [ 637.165182] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 637.269840] audit: type=1800 audit(1582598960.297:151): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=16946 res=0 [ 637.302983] input: syz1 as /devices/virtual/input/input71 [ 637.375080] audit: type=1800 audit(1582598960.397:152): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=16977 res=0 02:49:20 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:20 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x31}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:49:20 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 637.668630] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 637.700108] audit: type=1800 audit(1582598960.747:153): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17169 res=0 [ 637.835927] input: syz1 as /devices/virtual/input/input72 02:49:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:21 executing program 5: clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0xb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socket$inet_tcp(0x2, 0x1, 0x0) 02:49:21 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:21 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 638.007254] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:21 executing program 5: clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0xb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036158, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socket$inet_tcp(0x2, 0x1, 0x0) 02:49:21 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 638.071444] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.094116] audit: type=1800 audit(1582598961.147:154): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=25 res=0 [ 638.164061] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.202421] audit: type=1800 audit(1582598961.257:155): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17585 res=0 [ 638.241245] input: syz1 as /devices/virtual/input/input73 [ 638.337970] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.365354] audit: type=1800 audit(1582598961.417:156): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=26 res=0 [ 638.451642] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:21 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:21 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000040)='./file0/file1\x00', 0x40840, 0x0) read$FUSE(r2, 0x0, 0x0) 02:49:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:21 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 638.594871] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.626997] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.662703] audit: type=1800 audit(1582598961.717:157): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=27 res=0 [ 638.770660] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.774892] input: syz1 as /devices/virtual/input/input74 02:49:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:21 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:21 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:21 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 638.959877] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 638.987609] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:22 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:22 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 639.100955] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 639.236228] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 639.256137] input: syz1 as /devices/virtual/input/input75 02:49:22 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 639.348390] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) setpriority(0x0, 0x0, 0x0) 02:49:22 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:22 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 639.601547] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 639.619839] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 639.749392] input: syz1 as /devices/virtual/input/input76 [ 639.800461] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:22 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:22 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 639.982423] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 639.995396] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 640.127013] input: syz1 as /devices/virtual/input/input77 02:49:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:23 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:23 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:23 executing program 1: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 640.311092] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:23 executing program 5: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:23 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 640.491427] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 640.509217] kauditd_printk_skb: 8 callbacks suppressed [ 640.509226] audit: type=1800 audit(1582598963.557:166): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=31 res=0 02:49:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 640.565965] audit: type=1800 audit(1582598963.617:167): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=32 res=0 02:49:23 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 640.688730] FAT-fs (loop5): bread failed, FSINFO block (sector = 1) [ 640.703658] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 640.730479] input: syz1 as /devices/virtual/input/input78 [ 640.743836] audit: type=1800 audit(1582598963.797:168): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17806 res=0 02:49:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:23 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:23 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 640.845202] FAT-fs (loop5): bread failed, FSINFO block (sector = 1) 02:49:23 executing program 1: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4912}}], 0x18}}], 0x2, 0x0) [ 640.971827] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 641.008418] audit: type=1800 audit(1582598964.057:169): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17457 res=0 02:49:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 641.187589] input: syz1 as /devices/virtual/input/input79 02:49:24 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) 02:49:24 executing program 1: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:24 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 641.346315] audit: type=1800 audit(1582598964.397:170): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=33 res=0 02:49:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x2, 0x0) [ 641.505442] audit: type=1800 audit(1582598964.557:171): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=34 res=0 02:49:24 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 641.637374] input: syz1 as /devices/virtual/input/input80 02:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:24 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 641.812880] audit: type=1800 audit(1582598964.867:172): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=35 res=0 02:49:24 executing program 5: linkat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0x35b) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x2, 0x0, 0x0, "8100"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:49:24 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00'}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:25 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:25 executing program 5: linkat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0x35b) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x17, 0x0, 0x2, 0x0, 0x0, "8100"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 642.075804] audit: type=1800 audit(1582598965.127:173): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=36 res=0 02:49:25 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:25 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00'}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 642.164923] input: syz1 as /devices/virtual/input/input81 02:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4011}, 0xc, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:49:25 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:25 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 642.362271] audit: type=1800 audit(1582598965.417:174): pid=9507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=37 res=0 02:49:25 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:25 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00'}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 642.619028] audit: type=1800 audit(1582598965.667:175): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=38 res=0 02:49:25 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00'}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 642.694442] input: syz1 as /devices/virtual/input/input82 02:49:25 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:25 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:25 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00'}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 643.017126] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 643.107591] input: syz1 as /devices/virtual/input/input83 02:49:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0x0, 0xee00]) 02:49:26 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:26 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:26 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00'}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 643.395121] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:26 executing program 5: 02:49:26 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:26 executing program 5: [ 643.576816] input: syz1 as /devices/virtual/input/input84 02:49:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:26 executing program 5: [ 643.625298] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 643.644242] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:26 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:26 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 5: 02:49:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:26 executing program 5: [ 643.830616] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 643.889847] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:27 executing program 5: readlink(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_GET_SECCOMP(0x15) fallocate(r0, 0x0, 0x0, 0x110001) 02:49:27 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 643.986022] input: syz1 as /devices/virtual/input/input85 [ 644.012308] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 644.182626] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 644.212874] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:27 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:27 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:27 executing program 5: 02:49:27 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:27 executing program 5: [ 644.372155] input: syz1 as /devices/virtual/input/input86 02:49:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:27 executing program 5: 02:49:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b09"], 0x11) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:27 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 644.483414] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 644.510263] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:27 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:27 executing program 5: [ 644.714017] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 644.751608] input: syz1 as /devices/virtual/input/input87 [ 644.825178] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 644.971262] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:28 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:28 executing program 5: 02:49:28 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:28 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:28 executing program 5: 02:49:28 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 645.115583] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 645.129612] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:28 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 645.248822] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 645.282890] input: syz1 as /devices/virtual/input/input88 [ 645.398891] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 645.411581] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b09"], 0x11) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:28 executing program 5: 02:49:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:28 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) [ 645.542828] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:28 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:28 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:28 executing program 5: 02:49:28 executing program 5: 02:49:28 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) [ 645.736769] input: syz1 as /devices/virtual/input/input89 02:49:28 executing program 5: 02:49:28 executing program 5: [ 645.875852] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 645.884451] kauditd_printk_skb: 10 callbacks suppressed [ 645.884467] audit: type=1800 audit(1582598968.927:186): pid=9834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=F3FF dev="loop0" ino=48 res=0 02:49:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 646.062873] audit: type=1800 audit(1582598968.937:187): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17839 res=0 [ 646.206379] input: syz1 as /devices/virtual/input/input90 02:49:29 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) 02:49:29 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:29 executing program 5: 02:49:29 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b09"], 0x11) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:29 executing program 5: [ 646.599813] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:29 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 646.658854] audit: type=1800 audit(1582598969.707:188): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=49 res=0 02:49:29 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) [ 646.710970] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:29 executing program 5: 02:49:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 646.778709] input: syz1 as /devices/virtual/input/input91 [ 646.876552] audit: type=1800 audit(1582598969.857:189): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=F3FF dev="loop0" ino=50 res=0 02:49:30 executing program 5: [ 646.918667] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:30 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) 02:49:30 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:30 executing program 5: [ 647.069940] audit: type=1800 audit(1582598970.047:190): pid=9894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=51 res=0 [ 647.120727] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 647.144726] input: syz1 as /devices/virtual/input/input92 02:49:30 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 647.396372] audit: type=1800 audit(1582598970.447:191): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17833 res=0 02:49:30 executing program 5: 02:49:30 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) 02:49:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c"], 0x19) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:30 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:30 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:30 executing program 5: 02:49:30 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:30 executing program 5: [ 647.653148] audit: type=1800 audit(1582598970.707:192): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17820 res=0 02:49:30 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 647.708212] input: syz1 as /devices/virtual/input/input93 02:49:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 647.796617] FAT-fs (loop3): bread failed, FSINFO block (sector = 1) [ 647.812330] audit: type=1800 audit(1582598970.847:193): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=05 dev="sda1" ino=17833 res=0 02:49:30 executing program 5: 02:49:30 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:31 executing program 5: [ 648.015049] audit: type=1800 audit(1582598971.067:194): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17849 res=0 02:49:31 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 648.061795] FAT-fs (loop3): bread failed, FSINFO block (sector = 1) [ 648.183952] input: syz1 as /devices/virtual/input/input94 [ 648.284016] audit: type=1800 audit(1582598971.337:195): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17828 res=0 02:49:31 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:31 executing program 5: 02:49:31 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 02:49:31 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c"], 0x19) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:31 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:31 executing program 5: [ 648.470788] FAT-fs (loop3): bread failed, FSINFO block (sector = 1) 02:49:31 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:31 executing program 5: 02:49:31 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) 02:49:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 648.645114] input: syz1 as /devices/virtual/input/input95 02:49:31 executing program 5: 02:49:31 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:31 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 648.781808] FAT-fs (loop3): bogus number of reserved sectors [ 648.819280] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:31 executing program 5: 02:49:31 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) [ 648.940961] FAT-fs (loop2): bread failed, FSINFO block (sector = 1) [ 648.965280] input: syz1 as /devices/virtual/input/input96 [ 649.019617] FAT-fs (loop3): bogus number of reserved sectors [ 649.027163] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c"], 0x19) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:32 executing program 5: 02:49:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:32 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:32 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:32 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) 02:49:32 executing program 5: [ 649.416613] FAT-fs (loop2): bread failed, FSINFO block (sector = 1) 02:49:32 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:32 executing program 5: [ 649.479788] FAT-fs (loop3): bogus number of reserved sectors [ 649.509060] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:32 executing program 5: 02:49:32 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) [ 649.607407] input: syz1 as /devices/virtual/input/input97 [ 649.644250] FAT-fs (loop2): bread failed, FSINFO block (sector = 1) 02:49:32 executing program 5: [ 649.765160] FAT-fs (loop3): bogus number of reserved sectors [ 649.802512] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:33 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e662"], 0x1d) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:33 executing program 5: 02:49:33 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:33 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) 02:49:33 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:33 executing program 5: [ 650.416430] FAT-fs (loop2): bogus number of reserved sectors [ 650.437093] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:33 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 650.472940] FAT-fs (loop3): bogus number of reserved sectors [ 650.497986] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:33 executing program 5: 02:49:33 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) [ 650.609086] input: syz1 as /devices/virtual/input/input98 02:49:33 executing program 5: [ 650.690475] FAT-fs (loop2): bogus number of reserved sectors [ 650.721098] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 650.755704] FAT-fs (loop3): bogus number of reserved sectors [ 650.782888] FAT-fs (loop3): Can't find a valid FAT filesystem [ 651.009141] input: syz1 as /devices/virtual/input/input99 02:49:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e662"], 0x1d) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:34 executing program 5: 02:49:34 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:34 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) 02:49:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:34 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:34 executing program 5: [ 651.377035] FAT-fs (loop3): bogus number of reserved sectors [ 651.383200] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:34 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) 02:49:34 executing program 5: [ 651.431044] FAT-fs (loop2): bogus number of reserved sectors [ 651.452155] FAT-fs (loop2): Can't find a valid FAT filesystem [ 651.505616] kauditd_printk_skb: 9 callbacks suppressed [ 651.505625] audit: type=1800 audit(1582598974.557:205): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17812 res=0 02:49:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 651.550619] input: syz1 as /devices/virtual/input/input100 02:49:34 executing program 5: 02:49:34 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 651.627725] FAT-fs (loop3): bogus number of reserved sectors [ 651.672236] FAT-fs (loop3): Can't find a valid FAT filesystem [ 651.707492] audit: type=1800 audit(1582598974.757:206): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=9C32E1E66279F3FF dev="loop0" ino=53 res=0 [ 651.729455] FAT-fs (loop2): bogus number of reserved sectors [ 651.739899] FAT-fs (loop2): Can't find a valid FAT filesystem [ 651.792023] audit: type=1800 audit(1582598974.847:207): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17812 res=0 [ 651.891922] input: syz1 as /devices/virtual/input/input101 02:49:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e662"], 0x1d) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:35 executing program 5: 02:49:35 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) 02:49:35 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:35 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:35 executing program 5: 02:49:35 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) [ 652.445530] FAT-fs (loop3): bogus number of reserved sectors [ 652.451653] FAT-fs (loop3): Can't find a valid FAT filesystem [ 652.463546] FAT-fs (loop2): bogus number of reserved sectors [ 652.476027] FAT-fs (loop2): Can't find a valid FAT filesystem [ 652.522263] input: syz1 as /devices/virtual/input/input102 02:49:35 executing program 5: [ 652.552988] audit: type=1800 audit(1582598975.607:208): pid=10261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17885 res=0 02:49:35 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 652.685933] audit: type=1800 audit(1582598975.737:209): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=9C32E1E66279F3FF dev="loop0" ino=54 res=0 [ 652.718608] FAT-fs (loop2): bogus number of reserved sectors 02:49:35 executing program 5: [ 652.736560] FAT-fs (loop3): bogus number of reserved sectors [ 652.747187] FAT-fs (loop2): Can't find a valid FAT filesystem [ 652.774798] FAT-fs (loop3): Can't find a valid FAT filesystem [ 652.838876] audit: type=1800 audit(1582598975.847:210): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17883 res=0 [ 652.958751] input: syz1 as /devices/virtual/input/input103 02:49:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4"], 0x1f) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:36 executing program 5: 02:49:36 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:36 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) 02:49:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:36 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:36 executing program 5: [ 653.456004] FAT-fs (loop3): bogus number of reserved sectors [ 653.480349] FAT-fs (loop2): bogus number of reserved sectors [ 653.494109] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:36 executing program 5: [ 653.500983] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:36 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 653.549302] audit: type=1800 audit(1582598976.597:211): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17871 res=0 [ 653.575887] input: syz1 as /devices/virtual/input/input104 02:49:36 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) 02:49:36 executing program 5: 02:49:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 653.748952] FAT-fs (loop2): bogus number of reserved sectors [ 653.785224] FAT-fs (loop3): bogus number of reserved sectors [ 653.785671] FAT-fs (loop2): Can't find a valid FAT filesystem [ 653.832878] FAT-fs (loop3): Can't find a valid FAT filesystem [ 653.840859] audit: type=1800 audit(1582598976.897:212): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17871 res=0 [ 653.966270] input: syz1 as /devices/virtual/input/input105 02:49:37 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) 02:49:37 executing program 5: 02:49:37 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4"], 0x1f) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:37 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:37 executing program 5: 02:49:37 executing program 5: [ 654.488850] FAT-fs (loop3): bogus number of reserved sectors [ 654.495153] FAT-fs (loop3): Can't find a valid FAT filesystem [ 654.517808] FAT-fs (loop2): bogus number of reserved sectors [ 654.534857] FAT-fs (loop2): Can't find a valid FAT filesystem [ 654.548127] input: syz1 as /devices/virtual/input/input106 02:49:37 executing program 5: 02:49:37 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:37 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) [ 654.573541] audit: type=1800 audit(1582598977.627:213): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17909 res=0 02:49:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:37 executing program 5: [ 654.753054] FAT-fs (loop2): bogus number of reserved sectors [ 654.781564] audit: type=1800 audit(1582598977.837:214): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17899 res=0 [ 654.785267] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:37 executing program 5: [ 654.851078] FAT-fs (loop3): bogus number of reserved sectors [ 654.859353] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:38 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) [ 654.928346] input: syz1 as /devices/virtual/input/input107 [ 655.063199] FAT-fs (loop3): bogus number of reserved sectors [ 655.076264] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:38 executing program 5: 02:49:38 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4"], 0x1f) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:38 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) 02:49:38 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:38 executing program 5: 02:49:38 executing program 5: [ 655.509782] FAT-fs (loop3): invalid media value (0x00) [ 655.520879] FAT-fs (loop3): Can't find a valid FAT filesystem [ 655.522908] FAT-fs (loop2): bogus number of reserved sectors [ 655.537267] input: syz1 as /devices/virtual/input/input108 02:49:38 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) 02:49:38 executing program 5: [ 655.584054] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:38 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:38 executing program 5: [ 655.719703] FAT-fs (loop3): invalid media value (0x00) [ 655.748806] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:38 executing program 5: [ 655.799837] FAT-fs (loop2): bogus number of reserved sectors [ 655.813368] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:38 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) [ 655.871789] input: syz1 as /devices/virtual/input/input109 [ 655.984592] FAT-fs (loop3): invalid media value (0x00) [ 655.989918] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:39 executing program 5: 02:49:39 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f6"], 0x20) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:39 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:39 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) 02:49:39 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) [ 656.478236] FAT-fs (loop2): bogus number of reserved sectors [ 656.478243] FAT-fs (loop3): invalid media value (0x00) [ 656.478254] FAT-fs (loop3): Can't find a valid FAT filesystem [ 656.485694] FAT-fs (loop2): Can't find a valid FAT filesystem [ 656.508338] input: syz1 as /devices/virtual/input/input110 02:49:39 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) [ 656.551679] kauditd_printk_skb: 2 callbacks suppressed [ 656.551687] audit: type=1800 audit(1582598979.607:217): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17914 res=0 02:49:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:39 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 656.688970] FAT-fs (loop3): invalid media value (0x00) [ 656.689433] audit: type=1800 audit(1582598979.737:218): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=79F3FF dev="loop0" ino=55 res=0 [ 656.704653] FAT-fs (loop3): Can't find a valid FAT filesystem 02:49:39 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) [ 656.764404] FAT-fs (loop2): bogus number of reserved sectors [ 656.781083] FAT-fs (loop2): Can't find a valid FAT filesystem [ 656.794746] input: syz1 as /devices/virtual/input/input111 02:49:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:39 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 656.855007] audit: type=1800 audit(1582598979.907:219): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17884 res=0 [ 656.927105] FAT-fs (loop3): invalid media value (0x00) [ 656.945149] FAT-fs (loop3): Can't find a valid FAT filesystem [ 656.978574] FAT-fs (loop2): bogus number of reserved sectors [ 656.984883] FAT-fs (loop2): Can't find a valid FAT filesystem [ 657.022157] input: syz1 as /devices/virtual/input/input112 02:49:40 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) [ 657.066207] audit: type=1800 audit(1582598980.117:220): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17928 res=0 02:49:40 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 657.181204] FAT-fs (loop3): invalid media value (0x00) [ 657.186748] FAT-fs (loop3): Can't find a valid FAT filesystem [ 657.224941] FAT-fs (loop2): invalid media value (0x00) [ 657.233914] FAT-fs (loop2): Can't find a valid FAT filesystem [ 657.305214] audit: type=1800 audit(1582598980.357:221): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17871 res=0 02:49:40 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f6"], 0x20) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:40 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) 02:49:40 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 657.472220] input: syz1 as /devices/virtual/input/input113 [ 657.485693] FAT-fs (loop2): invalid media value (0x00) [ 657.502166] FAT-fs (loop3): invalid media value (0x00) [ 657.508034] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 657.526786] FAT-fs (loop3): Can't find a valid FAT filesystem [ 657.545146] audit: type=1800 audit(1582598980.597:222): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17915 res=0 02:49:40 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:40 executing program 3: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) [ 657.706667] audit: type=1800 audit(1582598980.697:223): pid=10592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=79F3FF dev="loop0" ino=56 res=0 02:49:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 657.765574] FAT-fs (loop2): invalid media value (0x00) [ 657.781184] FAT-fs (loop3): invalid media value (0x00) [ 657.787785] FAT-fs (loop2): Can't find a valid FAT filesystem [ 657.794218] FAT-fs (loop3): Can't find a valid FAT filesystem [ 657.852570] input: syz1 as /devices/virtual/input/input114 [ 657.901976] audit: type=1800 audit(1582598980.957:224): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17925 res=0 02:49:41 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 658.081868] FAT-fs (loop2): invalid media value (0x00) [ 658.099041] FAT-fs (loop2): Can't find a valid FAT filesystem [ 658.170387] audit: type=1800 audit(1582598981.217:225): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17895 res=0 02:49:41 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f6"], 0x20) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:41 executing program 3: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000000c0)="06", 0x1, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) getpgrp(0xffffffffffffffff) 02:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:41 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 658.430242] input: syz1 as /devices/virtual/input/input115 02:49:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 658.494817] FAT-fs (loop2): invalid media value (0x00) [ 658.520942] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:41 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 658.575496] audit: type=1800 audit(1582598981.627:226): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=17923 res=0 [ 658.615037] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 658.732899] FAT-fs (loop2): invalid media value (0x00) [ 658.779583] FAT-fs (loop2): Can't find a valid FAT filesystem [ 658.793315] input: syz1 as /devices/virtual/input/input116 02:49:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 659.123820] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:42 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:42 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:42 executing program 5: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:42 executing program 5: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 659.462776] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 659.470098] FAT-fs (loop2): invalid media value (0x00) [ 659.476770] FAT-fs (loop2): Can't find a valid FAT filesystem [ 659.573194] input: syz1 as /devices/virtual/input/input117 02:49:42 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:42 executing program 5: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 659.614195] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:42 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 659.819869] input: syz1 as /devices/virtual/input/input118 [ 659.845894] FAT-fs (loop2): invalid media value (0x00) [ 659.880516] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:43 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:43 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 660.308796] FAT-fs (loop2): invalid media value (0x00) 02:49:43 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 660.342790] FAT-fs (loop2): Can't find a valid FAT filesystem 02:49:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 660.421564] input: syz1 as /devices/virtual/input/input119 02:49:43 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 02:49:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 660.621311] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:43 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) [ 660.703796] input: syz1 as /devices/virtual/input/input120 [ 660.714213] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 660.866019] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:44 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 02:49:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:44 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 02:49:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 661.222508] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 661.246431] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:44 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 661.315993] input: syz1 as /devices/virtual/input/input121 02:49:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 661.386078] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 661.514856] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 661.572605] input: syz1 as /devices/virtual/input/input122 02:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 02:49:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, 0x0, 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:45 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:45 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:49:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, 0x0, 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 662.072991] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 662.089695] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:45 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 662.160826] input: syz1 as /devices/virtual/input/input123 02:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:49:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 662.255594] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 662.389001] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 662.422584] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 662.462799] input: syz1 as /devices/virtual/input/input124 02:49:46 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, 0x0, 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:46 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(0x0, 0x40c2, 0x0) 02:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 02:49:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, 0xa, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) [ 663.025277] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:46 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(0x0, 0x40c2, 0x0) [ 663.085489] input: syz1 as /devices/virtual/input/input125 02:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x0) 02:49:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 663.348663] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x0) 02:49:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:46 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(0x0, 0x40c2, 0x0) 02:49:46 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x20}}, 0x0) [ 663.864979] net_ratelimit: 3 callbacks suppressed [ 663.864989] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 663.919826] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 663.932431] input: syz1 as /devices/virtual/input/input126 02:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 02:49:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:47 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 02:49:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 664.202216] input: syz1 as /devices/virtual/input/input127 [ 664.306054] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:47 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 02:49:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:47 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}}, 0x0) 02:49:47 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 664.704356] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:49:47 executing program 2: setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @dev, 0x0, 0x0, 'none\x00', 0x0, 0x7}, {@empty}}, 0x44) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 664.785775] input: syz1 as /devices/virtual/input/input128 02:49:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}}, 0x0) 02:49:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:47 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 664.905385] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 665.070811] input: syz1 as /devices/virtual/input/input129 02:49:48 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:48 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, 0xa, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}}, 0x0) 02:49:48 executing program 2: r0 = socket(0x400000000010, 0x2, 0x0) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 02:49:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10) sendmsg$unix(r3, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) 02:49:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 665.671894] input: syz1 as /devices/virtual/input/input130 02:49:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:48 executing program 2: r0 = socket(0x400000000010, 0x2, 0x0) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 02:49:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 665.727480] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 02:49:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000070603000000000000000000000000000800064000008c270500010007000000ffe42affa1366eb10f5ff3cebbd08d298c5edea891a299fbc133288e5b505057d70c4faec706d13a0e33635d79e57c1663400ff3316afe1daed6629e0ad753111c08d43dc5f2d745b350d4a10545a7c7858cf174cb56a2907a3abce60d85fbc0769e738943283921e563616fdcf59be5bf921e270137c94b2f5cf69b4024405c5fd4ab4c88bc53e30df459138316f2fbb645128b33310e0d5a98c6deda8f30415fabb95bff540c1b04cb"], 0x24}}, 0x0) [ 665.960858] input: syz1 as /devices/virtual/input/input131 02:49:49 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@can={0x1d, r1}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000070000000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:49:49 executing program 2: r0 = socket(0x400000000010, 0x2, 0x0) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 02:49:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") 02:49:49 executing program 2: r0 = socket(0x400000000010, 0x2, 0x0) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 02:49:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 666.542138] input: syz1 as /devices/virtual/input/input132 02:49:49 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@can={0x1d, r1}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a80)={0x2, 0x0, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "2f5d312500d5acdf"}}, 0x48}}, 0x0) 02:49:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 666.722940] input: syz1 as /devices/virtual/input/input133 02:49:50 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) munlock(&(0x7f0000bdd000/0x2000)=nil, 0x2000) 02:49:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x21a, 0x0, 0x59, 0x0, 0x1d7}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 02:49:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 667.403795] input: syz1 as /devices/virtual/input/input134 02:49:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x21a, 0x0, 0x59, 0x0, 0x1d7}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 02:49:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 667.686513] input: syz1 as /devices/virtual/input/input135 [ 667.858776] kauditd_printk_skb: 5 callbacks suppressed [ 667.858785] audit: type=1800 audit(1582598990.907:232): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=58 res=0 02:49:51 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:51 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x21a, 0x0, 0x59, 0x0, 0x1d7}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 02:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 668.324265] input: syz1 as /devices/virtual/input/input136 02:49:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 668.557210] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 668.697704] input: syz1 as /devices/virtual/input/input137 [ 668.788208] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 668.868058] audit: type=1800 audit(1582598991.917:233): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=59 res=0 02:49:52 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) 02:49:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 669.042572] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 669.179681] input: syz1 as /devices/virtual/input/input138 02:49:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) 02:49:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) [ 669.577803] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 669.721602] input: syz1 as /devices/virtual/input/input139 [ 669.824559] audit: type=1800 audit(1582598992.877:234): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=60 res=0 02:49:52 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) 02:49:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 669.937420] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 670.101726] input: syz1 as /devices/virtual/input/input140 02:49:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 670.603518] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:53 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c4edb65101dd4d141f62152548662"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 670.809691] input: syz1 as /devices/virtual/input/input141 [ 670.915300] audit: type=1800 audit(1582598993.967:235): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=61 res=0 02:49:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 670.961859] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 671.171570] input: syz1 as /devices/virtual/input/input142 02:49:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 671.537581] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 671.739313] input: syz1 as /devices/virtual/input/input143 02:49:54 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 671.845482] audit: type=1800 audit(1582598994.897:236): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17960 res=0 02:49:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 671.943713] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 672.099288] input: syz1 as /devices/virtual/input/input144 02:49:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:55 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 672.618284] input: syz1 as /devices/virtual/input/input145 [ 672.642251] audit: type=1800 audit(1582598995.697:237): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=62 res=0 02:49:55 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:55 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:55 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 672.960941] input: syz1 as /devices/virtual/input/input146 02:49:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 673.112435] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 673.122867] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received [ 673.247177] input: syz1 as /devices/virtual/input/input147 02:49:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r0, r0, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 673.520220] audit: type=1800 audit(1582598996.567:238): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17953 res=0 02:49:56 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 673.707812] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 673.718298] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:56 executing program 5: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 673.874232] input: syz1 as /devices/virtual/input/input148 02:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 674.027090] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 674.037536] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received 02:49:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r0, r0, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) [ 674.435244] input: syz1 as /devices/virtual/input/input149 02:49:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x0, 0x0, 0x0) 02:49:57 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:57 executing program 2: socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 674.616730] audit: type=1800 audit(1582598997.667:239): pid=11600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17982 res=0 02:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x0, 0x0, 0x0) 02:49:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:57 executing program 2: socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x0, 0x0, 0x0) 02:49:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r0, r0, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) 02:49:58 executing program 2: socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) [ 675.379346] audit: type=1800 audit(1582598998.427:240): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name=32E1E6623DC4F62979F3FF dev="sda1" ino=17972 res=0 02:49:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:58 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:58 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:58 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(0x0, 0x40c2, 0x0) 02:49:59 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:59 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:49:59 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:49:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:49:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x3, 0x3, '5'}]}}}}}}}}, 0x0) 02:49:59 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:49:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(0x0, 0x40c2, 0x0) 02:50:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 02:50:00 executing program 2: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:00 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 02:50:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 02:50:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(0x0, 0x40c2, 0x0) 02:50:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x3, '5'}]}}}}}}}}, 0x0) 02:50:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:01 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x3, '5'}]}}}}}}}}, 0x0) 02:50:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 678.397190] input: syz1 as /devices/virtual/input/input153 02:50:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x3, '5'}]}}}}}}}}, 0x0) [ 678.781946] input: syz1 as /devices/virtual/input/input154 02:50:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:50:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 02:50:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:02 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) [ 679.509456] input: syz1 as /devices/virtual/input/input155 02:50:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x400) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 02:50:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 679.921802] input: syz1 as /devices/virtual/input/input156 02:50:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:50:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:03 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) [ 680.648513] input: syz1 as /devices/virtual/input/input157 02:50:03 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x4], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) 02:50:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) [ 681.060246] input: syz1 as /devices/virtual/input/input158 02:50:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="79f3ff0000000500000000000000e73b0959237618c9331d9c32e1e6623dc4f629"], 0x21) sendfile(r1, r1, &(0x7f0000001000), 0x2000000000006) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) fchdir(r0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 02:50:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) 02:50:04 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:04 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x0, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) 02:50:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:04 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) [ 681.767456] input: syz1 as /devices/virtual/input/input159 02:50:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:04 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x0, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 682.162337] input: syz1 as /devices/virtual/input/input160 02:50:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 02:50:05 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x3, 0x0, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:05 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8, 0x3}]}}}]}, 0x3c}}, 0x0) 02:50:05 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 02:50:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 682.704833] input: syz1 as /devices/virtual/input/input161 02:50:05 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x0, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) [ 682.870616] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops 02:50:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:06 executing program 3: connect(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:06 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c480200020000de010300000000e4ff064b3f013a00fb48a16700008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900010000000b0000db000004da3600"}, 0x80, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 683.096196] input: syz1 as /devices/virtual/input/input162 02:50:06 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c648"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:06 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x3ff800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0xa0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 02:50:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x0, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(0xffffffffffffffff, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) [ 683.545208] input: syz1 as /devices/virtual/input/input163 02:50:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x5, 0x0, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:06 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:06 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='vmnet0$ppp1wlan0systemtrustedcpuset@+selinux#$!\x00') [ 683.923060] input: syz1 as /devices/virtual/input/input164 02:50:07 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c648"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:07 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 02:50:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:07 executing program 0: creat(&(0x7f0000000140)='./bus\x00', 0x0) lremovexattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 02:50:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x0, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 02:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:07 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x81) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, 0x80, 0x0}}], 0x1, 0x0) [ 684.403131] input: syz1 as /devices/virtual/input/input165 02:50:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:07 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c648"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:07 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x0, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:07 executing program 5: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x204, 0x70bd2a, 0x7, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4140) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r8, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a8c1b6a238e3c4ad8aaf50c71a903efb4ed6f549d620cab62d981eb6d374923a2b1597449331902ca8bdf6a7b128fe8476d4d6652037756d0ac81399ac0582b151d141fe83ed1d9132ab02d67c1c5acd5789c4893db25c5630cca8a430aeff83d56f554ff14196fa347774c415acdeb046e3cf870dd52c26f6c603b8f3e34d021af63b3cfa8316e16c38ca72e58c356fde87643e8b809318f8d222ce63317ded42fa3aa394ade7dfe439c6479605528726a068cdc76a22067b3534442da88bc90000000000000000000000000f6a0d707"], 0x34}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) 02:50:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff95000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:07 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b5117f117e9a7f4"], 0x48}}, 0x0) 02:50:07 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r1, r4, 0x0, 0xa808) 02:50:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 684.823492] ebtables: ebtables: counters copy to user failed while replacing table [ 684.903315] input: syz1 as /devices/virtual/input/input166 [ 684.984147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 685.000127] ebtables: ebtables: counters copy to user failed while replacing table [ 685.028172] [ 685.029844] ====================================================== [ 685.036180] WARNING: possible circular locking dependency detected [ 685.042499] 4.14.171-syzkaller #0 Not tainted [ 685.046993] ------------------------------------------------------ [ 685.053321] syz-executor.5/12185 is trying to acquire lock: [ 685.059024] (&table[i].mutex){+.+.}, at: [] nfnl_lock+0x24/0x30 [ 685.066748] [ 685.066748] but task is already holding lock: 02:50:08 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 685.072724] (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x3c/0x3d0 [ 685.081062] [ 685.081062] which lock already depends on the new lock. [ 685.081062] [ 685.089382] [ 685.089382] the existing dependency chain (in reverse order) is: [ 685.097005] [ 685.097005] -> #1 (&xt[i].mutex){+.+.}: [ 685.102485] lock_acquire+0x16f/0x430 [ 685.106817] __mutex_lock+0xe8/0x1470 [ 685.111148] mutex_lock_nested+0x16/0x20 [ 685.115745] xt_find_revision+0x82/0x200 [ 685.120326] nfnl_compat_get+0x229/0x950 [ 685.124910] nfnetlink_rcv_msg+0xa08/0xc00 [ 685.129663] netlink_rcv_skb+0x14f/0x3c0 [ 685.134239] nfnetlink_rcv+0x1ab/0x1650 [ 685.138738] netlink_unicast+0x44d/0x650 [ 685.143307] netlink_sendmsg+0x7c4/0xc60 [ 685.147869] sock_sendmsg+0xce/0x110 [ 685.152094] ___sys_sendmsg+0x70a/0x840 [ 685.156566] __sys_sendmsg+0xb9/0x140 [ 685.160877] SyS_sendmsg+0x2d/0x50 [ 685.164926] do_syscall_64+0x1e8/0x640 [ 685.169317] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 685.175018] [ 685.175018] -> #0 (&table[i].mutex){+.+.}: [ 685.180739] __lock_acquire+0x2cb3/0x4620 [ 685.185413] lock_acquire+0x16f/0x430 [ 685.189738] __mutex_lock+0xe8/0x1470 [ 685.194047] mutex_lock_nested+0x16/0x20 [ 685.198610] nfnl_lock+0x24/0x30 [ 685.202480] ip_set_nfnl_put+0x120/0x320 [ 685.207065] set_target_v1_destroy+0xe3/0x170 [ 685.212078] cleanup_entry+0x1a6/0x260 [ 685.216645] __do_replace+0x3c5/0x5c0 [ 685.220954] do_ip6t_set_ctl+0x296/0x3f4 [ 685.225537] nf_setsockopt+0x67/0xc0 [ 685.229758] ipv6_setsockopt+0x105/0x130 [ 685.234327] udpv6_setsockopt+0x4e/0x90 [ 685.238818] sock_common_setsockopt+0x94/0xd0 [ 685.243816] SyS_setsockopt+0x13c/0x210 [ 685.248295] do_syscall_64+0x1e8/0x640 [ 685.252700] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 685.258402] [ 685.258402] other info that might help us debug this: [ 685.258402] [ 685.266529] Possible unsafe locking scenario: [ 685.266529] [ 685.272573] CPU0 CPU1 [ 685.277236] ---- ---- [ 685.281905] lock(&xt[i].mutex); [ 685.285342] lock(&table[i].mutex); [ 685.291566] lock(&xt[i].mutex); [ 685.297518] lock(&table[i].mutex); [ 685.301216] [ 685.301216] *** DEADLOCK *** [ 685.301216] [ 685.307270] 1 lock held by syz-executor.5/12185: [ 685.312002] #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x3c/0x3d0 [ 685.320773] [ 685.320773] stack backtrace: [ 685.325267] CPU: 1 PID: 12185 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0 [ 685.333171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.342551] Call Trace: [ 685.345132] dump_stack+0x142/0x197 [ 685.348754] ? vprintk_func+0x65/0x159 [ 685.352663] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 685.358060] __lock_acquire+0x2cb3/0x4620 [ 685.362233] ? lock_downgrade+0x740/0x740 [ 685.366368] ? trace_hardirqs_on+0x10/0x10 [ 685.370600] lock_acquire+0x16f/0x430 [ 685.374423] ? nfnl_lock+0x24/0x30 [ 685.377947] ? nfnl_lock+0x24/0x30 [ 685.381482] __mutex_lock+0xe8/0x1470 [ 685.385297] ? nfnl_lock+0x24/0x30 [ 685.388835] ? trace_hardirqs_on+0x10/0x10 [ 685.393084] ? nfnl_lock+0x24/0x30 [ 685.396614] ? free_percpu+0x232/0x710 [ 685.400490] ? mutex_trylock+0x1c0/0x1c0 [ 685.404541] ? ip_set_nfnl_put+0xef/0x320 [ 685.408679] ? find_held_lock+0x35/0x130 [ 685.412722] ? ip_set_nfnl_put+0xef/0x320 [ 685.416854] mutex_lock_nested+0x16/0x20 [ 685.420912] ? mutex_lock_nested+0x16/0x20 [ 685.425135] nfnl_lock+0x24/0x30 [ 685.428491] ip_set_nfnl_put+0x120/0x320 [ 685.432534] set_target_v1_destroy+0xe3/0x170 [ 685.437010] ? set_target_v3_destroy+0x200/0x200 [ 685.441780] cleanup_entry+0x1a6/0x260 [ 685.445660] ? cleanup_match+0x140/0x140 [ 685.449703] __do_replace+0x3c5/0x5c0 [ 685.453484] ? compat_do_ip6t_get_ctl+0x870/0x870 [ 685.458307] ? _copy_from_user+0x99/0x110 [ 685.462439] do_ip6t_set_ctl+0x296/0x3f4 [ 685.466503] ? compat_do_ip6t_set_ctl+0x150/0x150 [ 685.471375] ? mutex_unlock+0xd/0x10 [ 685.475080] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 685.480354] nf_setsockopt+0x67/0xc0 [ 685.484061] ipv6_setsockopt+0x105/0x130 [ 685.488109] udpv6_setsockopt+0x4e/0x90 [ 685.492104] sock_common_setsockopt+0x94/0xd0 [ 685.496582] SyS_setsockopt+0x13c/0x210 [ 685.500543] ? SyS_recv+0x40/0x40 [ 685.504010] ? SyS_clock_gettime+0xf8/0x180 [ 685.508321] ? do_syscall_64+0x53/0x640 [ 685.512309] ? SyS_recv+0x40/0x40 [ 685.515743] do_syscall_64+0x1e8/0x640 [ 685.519611] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 685.524438] entry_SYSCALL_64_after_hwframe+0x42/0xb7 02:50:08 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 685.529605] RIP: 0033:0x45c449 [ 685.532775] RSP: 002b:00007fa207304c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 685.540473] RAX: ffffffffffffffda RBX: 00007fa2073056d4 RCX: 000000000045c449 [ 685.547748] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 685.555014] RBP: 000000000076bf20 R08: 0000000000000001 R09: 0000000000000000 [ 685.562270] R10: 0000000020000900 R11: 0000000000000246 R12: 00000000ffffffff [ 685.569534] R13: 0000000000000a32 R14: 00000000004d5bb0 R15: 000000000076bf2c 02:50:08 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) 02:50:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x9, 0x0, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:08 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r1, r4, 0x0, 0xa808) [ 685.584067] ip6_tables: ip6tables: counters copy to user failed while replacing table 02:50:08 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) 02:50:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 685.647561] ip6_tables: ip6tables: counters copy to user failed while replacing table 02:50:08 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) 02:50:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:08 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:08 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, 0x0, 0x0) [ 685.707865] ebtables: ebtables: counters copy to user failed while replacing table 02:50:08 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 02:50:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 685.800629] input: syz1 as /devices/virtual/input/input167 [ 685.939935] ebtables: ebtables: counters copy to user failed while replacing table 02:50:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:09 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 02:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x0, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:09 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:09 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e000000040000009002000000000000c800000060010000c8000000c8000000e8010000f8010000f8010000f8010000f80100000400000000000000000000000000000000000000000000000000000000000000000000000000000000003e7ef2a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000010000000000000000000030006164647274797065000000000000d259000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac0d76bf8c329dcbd6000000677265300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000712a000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001000004000000050f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:50:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:09 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 02:50:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 686.493041] ip_tables: iptables: counters copy to user failed while replacing table 02:50:09 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)}, 0x0) [ 686.613780] input: syz1 as /devices/virtual/input/input168 02:50:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:09 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 02:50:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x0, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:09 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) [ 686.693514] ebtables: ebtables: counters copy to user failed while replacing table 02:50:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 686.763659] ip_tables: iptables: counters copy to user failed while replacing table [ 686.908604] input: syz1 as /devices/virtual/input/input169 02:50:10 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:10 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 02:50:10 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 02:50:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:50:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x8, 0x0, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:10 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x5}}, 0x0) 02:50:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:10 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x5}}, 0x0) 02:50:10 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) 02:50:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 687.480711] input: syz1 as /devices/virtual/input/input170 02:50:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:11 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x5}}, 0x0) 02:50:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x0, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:11 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:50:11 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x6}}, 0x0) 02:50:11 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x6}}, 0x0) 02:50:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 688.322325] input: syz1 as /devices/virtual/input/input171 02:50:11 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:12 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:50:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x0, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x6}}, 0x0) 02:50:12 executing program 0: socket(0xa, 0x40000000002, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x6}}, 0x0) 02:50:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:50:12 executing program 0: socket(0xa, 0x40000000002, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x6}}, 0x0) 02:50:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff9500"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 689.182908] input: syz1 as /devices/virtual/input/input172 02:50:12 executing program 4: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x0}, {0x0}], 0x2, 0x0) sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000008a32a45eeeba99ebdd86546a3000ce7c1137d7789941d9495833e10f87d75518dad29e6474e7d5a370134c1e6b414b1dd3546d040958343cc11e734013f5dc758a7c7883680870ccbe5f2a6b6b5cf874bfd05f1b41c08b2b7182ad37b29a0a6636198c4570555e13e286f7b366e4fd3c06321c04df31a27f32c9854a79736d5b07b95821ba3f90b9cb847a1120207250792a8ecec8e758c64863ca92b05f16de1d18bfb430b86a18bff690e648fd03a65eef7effd860d9bb5864c5be881ee0b7c149c040352c"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0x51}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 02:50:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 02:50:12 executing program 0: socket(0xa, 0x40000000002, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff9500"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x7fffffff, 0x0, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x7, 0x8001, 0x0, 0x20, 0x0, 0x1, 0x5, 0x7, 0x7ff, 0x10000, 0x7ff, 0x8, 0x2, 0x237, 0x0, 0x8, 0x6, 0x9, 0x2, 0x20a, 0x9, 0x10000, 0x682, 0x800, 0x20, 0xac7, 0x80, 0x5, 0x80, 0x0, 0x2, 0x44, 0x8000, 0x10001, 0x1, 0x80000000, 0x2, 0x378, 0x4ea, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x8000, 0x8000, 0xfffffff7, 0xff000000, 0xda, 0x9, 0xfac3, 0x2, 0x6], [0x3, 0x6, 0x1ff, 0x9, 0x6, 0x20, 0x3f, 0xffffff84, 0x9, 0x5, 0x5, 0xff, 0x2, 0x8, 0x9, 0x1ff, 0x7fff, 0x0, 0x81, 0x1e13, 0x9, 0x42a8, 0x8000, 0x7ff, 0x100, 0x9, 0x3, 0x80000001, 0xffff, 0x2, 0xfffffffd, 0x0, 0xfffffe01, 0x81, 0x1, 0x8001, 0x6, 0xfff, 0x7, 0x7, 0x7fffffff, 0x4, 0xd8a6, 0x5, 0x40, 0x628, 0x8001, 0x8, 0xfffffff8, 0x0, 0x6959951e, 0xf5a, 0x9, 0x2, 0x85, 0x4, 0x6, 0x4000000, 0x6, 0x40, 0xa6, 0x2, 0xcc4, 0x7ff], [0x6, 0x7ff80, 0xfffffffe, 0x3a000000, 0x200, 0x0, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80000001, 0x40, 0x6, 0x1000, 0x4, 0x8a, 0x1000, 0x73, 0x0, 0x4, 0x1f, 0xb20f, 0x44b2, 0x9, 0x4, 0x3, 0x4, 0x36f6, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x5, 0xe43, 0x7b8f, 0x8, 0x80, 0x5, 0x3f0000, 0xffff, 0x2f7, 0x4, 0x0, 0x62d, 0x22, 0x20, 0xffff, 0x3, 0x9, 0x2, 0x10000, 0x35b6, 0x51c, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x8, 0x2b6, 0x7]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:50:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x6}}, 0x0) 02:50:12 executing program 0: r0 = socket(0xa, 0x40000000002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) dup(0xffffffffffffffff) 02:50:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff9500"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) 02:50:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b51"], 0x6}}, 0x0) [ 689.894873] net_ratelimit: 8 callbacks suppressed [ 689.894879] ip_tables: iptables: counters copy to user failed while replacing table 02:50:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e000000040000009002000000000000c800000060010000c8000000c8000000e8010000f8010000f8010000f8010000f80100000400000000000000000000000000000000000000000000000000000000000000000000000000000000003e7ef2a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000010000000000000000000030006164647274797065000000000000d259000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000e0000001ac0d76bf8c329dcbd6000000677265300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000712a000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800534554000000000000000000000000000000000000000000000000000001000004000000050f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x8003, 0x5c) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 690.025562] input: syz1 as /devices/virtual/input/input173 02:50:13 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b51"], 0x6}}, 0x0) 02:50:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110440000000000d400ae0467100000efffffff950000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x7c6]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x5c) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@ipx, &(0x7f0000000440)=0x80) [ 690.136768] ip_tables: iptables: counters copy to user failed while replacing table [ 690.148401] ebtables: ebtables: counters copy to user failed while replacing table 02:50:13 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000300)=@can, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009b51"], 0x6}}, 0x0) 02:50:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [0x0, 0x1, 0x401, 0x60000, 0x8, 0x9, 0x3, 0xcff5, 0x0, 0x2, 0x0, 0x7, 0x1, 0x1, 0xffffffe0, 0x5, 0xfffffffa, 0x5, 0x3, 0xfffffffd, 0xfffffff9, 0x1, 0x200, 0x0, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x2, 0x4, 0x3, 0x80000000, 0x105f, 0x0, 0x3f, 0x7fff, 0x7, 0x5, 0x8, 0x7, 0x2d, 0x14c, 0x0, 0x6, 0x3, 0x40, 0x2, 0x2, 0x5, 0x2, 0x0, 0x0, 0x8, 0x9, 0x5, 0x3, 0x4, 0x5], [0x7, 0xfffffe01, 0x4, 0x401, 0x8, 0x8000, 0x694, 0x0, 0x0, 0x7, 0xfe, 0x